Cross Site Scripting Vulnerability in FastCMS Template Menu Component
CVE-2025-1332
Key Information:
Badges
What is CVE-2025-1332?
A vulnerability impacting FastCMS versions up to 0.1.5 has been identified, specifically affecting the Template Menu component found in the file /fastcms.html#/template/menu. This flaw allows attackers to execute malicious scripts in the context of the user’s session via a cross site scripting (XSS) attack. The vulnerability can be exploited remotely, posing risks to unsuspecting users. Given the continuous delivery model of FastCMS, affected users should remain vigilant and seek updates as version specifics may not be disclosed. This vulnerability has been made public, raising concerns about its exploitation.
Affected Version(s)
FastCMS 0.1.0
FastCMS 0.1.1
FastCMS 0.1.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.