CVE-2026-38947

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

FluentCMS 1.2.3 is vulnerable to Cross Site Scripting (XSS) in TextHTML plugin.

Published 2026-05-05. Last modified 2026-07-24.