EUVD-2025-209787

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2025-70842

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

FluentCMS 跨站脚本漏洞

FluentCMS is an open-source content management system developed by FluentCMS. Version 1.2.3 of FluentCMS has a cross-site scripting vulnerability. This vulnerability stems from a storage-based cross-site script in the file management module. It allows authenticated administrators to upload...

CVE-2025-70842

A Stored Cross-Site Scripting (XSS) vulnerability exists in the File Management module of FluentCMS 1.2.3 (specifically within the FluentCMS.Web.Plugins.Admin package). The flaw allows an authenticated administrator to upload specially crafted SVG files containing malicious JavaScript. Because th...

CVE-2025-70842

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2025-70842

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2025-70842: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2025-70842

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

PT-2026-40033

A Stored Cross-Site Scripting XSS vulnerability was discovered in the File Management module of FluentCMS 1.2.3. The flaw allows an authenticated administrator to upload crafted SVG files containing malicious JavaScript code. Once uploaded, the script executes in the browser of any user who...

CVE-2026-38947

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

FluentCMS TextHTML Plugin Cross-Site Scripting Vulnerability

FluentCMS is a .NET-based content management system CMS that is primarily used to quickly build websites and manage web content. A cross-site scripting vulnerability exists in the FluentCMS TextHTML plugin. The vulnerability stems from insufficient validation of user input and failure to properly...

EUVD-2026-27474

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

CVE-2026-38947

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

FluentCMS 安全漏洞

FluentCMS is a .NET-based content management system CMS that is primarily used to quickly build websites and manage web content. A cross-site scripting vulnerability exists in the FluentCMS TextHTML plugin. The vulnerability stems from insufficient validation of user input and failure to properly...

CVE-2026-38947

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

CVE-2026-38947

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

CVE-2026-38947: Improper Neutralization of Input During Web Page Generation

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

CVE-2026-38947

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting XSS in TextHTML plugin...

PT-2026-37233

Name of the Vulnerable Software and Affected Versions FluentCMS version 1.2.3 Description Cross Site Scripting XSS exists in the TextHTML plugin. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. Recommendations At the moment, there is no...

CVE-2026-38947

FluentCMS version 1.2.3 is vulnerable to Cross-Site Scripting (XSS) within the TextHTML plugin . The root cause is insufficient validation of user input and a failure to properly filter special characters. An attacker can exploit this by injecting malicious code into a page, which may result in s...