Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Frog Cms
Frog Cms Project
NVD
CVSS 3.0
6.1
EPSS
0.7%