eoniboogie/CVE_Disclosures

Releases0

CVE disclosures

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-67349 ↗	Dec 26, 2025Friday, 26 December 2025, 15:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags.