CVE-2026-38947

Impact

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/fluentcms/FluentCMS/issues/2405
• https://github.com/fluentcms/FluentCMS/issues/2405