EUVD-2026-27474Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
2DescriptionCVE.org
FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.
AnalysisAI
Reflected cross-site scripting (XSS) in FluentCMS 1.2.3 TextHTML plugin allows unauthenticated remote attackers to inject malicious scripts into web pages viewed by other users via specially crafted requests. The vulnerability requires user interaction (clicking a malicious link) and affects confidentiality and integrity with a CVSS score of 6.1, but is not currently exploited in the wild and carries negligible exploitation probability per EPSS.
Technical ContextAI
The vulnerability exists in the TextHTML plugin component of FluentCMS, a content management system. The root cause is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), indicating insufficient input validation or output encoding in the plugin's HTML rendering logic. The TextHTML plugin likely processes user-supplied HTML or markup without proper sanitization before displaying it to other users, allowing attackers to inject arbitrary JavaScript that executes in the context of the victim's browser session.
RemediationAI
The primary remediation is to upgrade FluentCMS to a patched version beyond 1.2.3. However, no specific patched version number is confirmed in the available advisory data; consult the official FluentCMS repository (https://github.com/fluentcms/FluentCMS/issues/2405) for the exact fix version and release date. As an interim workaround, disable or restrict access to the TextHTML plugin if it is not critical to operations, as this directly addresses the vulnerable component. Alternatively, implement a Web Application Firewall (WAF) rule that detects and blocks reflected XSS payloads in requests to FluentCMS endpoints, though this is less reliable than patching. Restrict user permissions to the TextHTML plugin editing interface to trusted administrators only, reducing the attack surface. Apply context-aware output encoding to all HTML content rendered by the plugin to ensure user input is properly escaped; this may require code-level fixes if not addressed in vendor patches.
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Unauthenticated remote OS command injection in MeiG Smart FORGE_SLT711 cellular gateway firmware MDM9607.LE.1.0-00110-ST
Unauthenticated API access in LalanaChami Pharmacy Management System (commit 5c3d028) allows remote attackers to dump al
In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write o
Giflib 5.2.2 contains a buffer overflow in the EGifGCBToExtension function that fails to validate allocated memory when
Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_
Arbitrary kernel memory read/write in Realtek rtl819x Jungle SDK Wi-Fi driver allows local unprivileged attackers to acc
Denial of service in GPAC's MP4Box/libgpac media importer (versions before 26.02.0) lets an attacker crash the tool by s
An issue in the parse_month function (/time/strptime.rs) of relibc commit ab6a2e allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library) at commit 61f42d allows attackers to crash a process by ge
An issue in the pthread_rwlockattr_setpshared() function of relibc commit 61f42d allows attackers to cause a Denial of S
Denial of service in relibc (the Redox OS C standard library implementation, commit 61f42d) lets attackers crash a proce
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today