Unknown · Fearlesscms · CVE-2025-56429
**Name of the Vulnerable Software and Affected Versions**
FearlessCMS version 0.0.2-15
**Description**
A Cross Site Scripting issue exists in FearlessCMS. This allows a remote attacker to potentially obtain sensitive information through the `login.php` component. The `login.php` component is the point of exploitation.
**Recommendations**
Update FearlessCMS to a version that addresses this issue. As a temporary workaround, consider restricting access to the `login.php` component to minimize the risk of exploitation.