CVE-2025-56431

FearlessCMS v0.0.2-15 is affected by a directory traversal vulnerability that can be exploited remotely via the plugin-handler.php and file_get_contents() to cause denial of service. The weakness is described consistently across multiple trusted feeds (Red Hat, EUVD/ENISA, NVD, OSV, CNNVD, CVE li...

CVE-2025-56429

FearlessCMS v0.0.2-15 is affected by a Cross Site Scripting (XSS) vulnerability in the login.php component that could allow a remote attacker to obtain sensitive information. The issue is documented across multiple sources (NVD/Red Hat/EUVD/OSV/CNNVD) with the same description. No explicit exploi...

CVE-2025-56430

CVE-2025-56430 : A directory traversal vulnerability affects FearlessCMS v0.0.2-15, allowing a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function. The root cause is a directory traversal issue in the referenced code path. Exploitation details ...