Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Frog Cms
NVD
CVSS 3.0
6.1
EPSS
0.7%