Vulnerability · Published Feb 16, 2025 · Assigned by VulDB

CVE-2025-1332FastCMS Template Menu menu cross site scripting

Low 2.4

In plain English

A low-severity cross-site scripting in FastCMS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)2.4Low

Exploit odds (30 days)0.4%top 69.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html#/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products (as reported)

Vendor	Product	Versions
n/a	FastCMS	0.1.00.1.10.1.20.1.30.1.40.1.5

Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

References

VDB-295942 | FastCMS Template Menu menu cross site scripting vdb-entry
VDB-295942 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
https://gitee.com/xjd2020/fastcms/issues/IBKJ1W exploit, issue-tracking