Threats tagged 'ghsa-mf77-gvr4-79cc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2025-12935The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin Medium6.42025-11-21GCVE DatabaseCVE-2025-12935 The FluentCRM WordPress plugin up to version 2.9.84 is vulnerable to stored cross-site scripting (XSS) via its 'fluentcrm_content' shortcode. Authenticated users with contributor-level access or higher can inject malicious scripts that execute when other users view the affected pages. This vulnerability arises from insufficient input sanitization and output escaping of user-supplied attributes. Report on CVE-2025-12935 Vulnerability CWE-79 #ghsa-mf77-gvr4-79cc	GCVE Database	2025-11-21

Page 1 of 1