Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FluentCMS 2026 contains a stored cross-site scripting vulnerability that allows authenticated administrators to upload SVG files with embedded JavaScript via the File Management module. Attackers can upload malicious SVG files that execute JavaScript in the browser of any user accessing the uploaded file URL.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-15549 Stored XSS in FluentCMS 2026 File Management Module via SVG Upload https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15549
Post summary
FluentCMS’s 2026 File Management module is vulnerable to a stored XSS attack through SVG uploads; details are available via the provided vulnerability link.
CVE-2025-15549 FluentCMS 2026 contains a stored cross-site scripting vulnerability that allows authenticated administrators to upload SVG files with embedded JavaScript via the File… https://www.cve.org/CVERecord?id=CVE-2025-15549
Post summary
FluentCMS 2026 (CVE‑2025‑15549) contains a stored XSS vulnerability permitting authenticated administrators to upload SVG files with embedded JavaScript.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fluentcms | fluentcms | - | - | - |