FluentCMS version 1.2.3 contains a Cross Site Scripting (XSS) vulnerability in its TextHTML plugin. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of a user's browser session. The issue is classified as medium severity with a CVSS score of 6.1.