CVE-2026-38947
FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2026-05-05
- Last modified
- 2026-05-06
- Weaknesses
- CWE-79
References
- https://github.com/fluentcms/FluentCMS/issues/2405
