Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v82x-ghcg-c238

Опубликовано: 26 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the section, allowing remote attackers to inject arbitrary script tags.

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the section, allowing remote attackers to inject arbitrary script tags.

EPSS

Процентиль: 14%
0.00046
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
около 1 месяца назад

A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote attackers to inject arbitrary script tags.

EPSS

Процентиль: 14%
0.00046
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79