CVE-2025-56429

Medium · 6.1

CVSS

6.1

EPSS

0.3%

Published

Dec 10, 2025

CISA due date

—

The record

Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to obtain sensitive information via the login.php component.

Affected packages

Ecosystem	Package	Introduced	Fixed