fluentcms vulnerabilities
CVEs whose affected-version data names the fluentcms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86271Medium· 4.7PoCA vulnerability was found in FluentCMS up to 0.0.5
A vulnerability was found in FluentCMS up to 0.0.5. This affects the function GetAccessible of the file src/Backend/FluentCMS.Services/Permissions/PermissionManager.cs. Performing a manipulation results in missing authorization. It is po…
▾ TwilightEPSS 0.40%via NVD
CVE-2025-67349Medium· 6.1A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3
A cross-site scripting (XSS) vulnerability was identified in FluentCMS 1.2.3. After logging in as an admin and navigating to the "Add Page" function, the application fails to properly sanitize input in the <head> section, allowing remote…
▾ Sunlitfluentcms · fluentcmsEPSS 0.29%via NVD