Advisories · Technology

FastCMS.

Every CVE that names FastCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-3177 CVE record

CVSS 2.3 Low

FastCMS JWT hard-coded key
- FastCMS
- Hard-coded credentials
- CWE-320
Not analysed yet 3 Apr 2025
CVE-2025-2593 CVE record

CVSS 5.3 Medium

FastCMS list sql injection
- FastCMS
- Other injection
- SQL injection
Not analysed yet 21 Mar 2025
CVE-2025-1332 CVE record

CVSS 4.8 Medium

FastCMS Template Menu menu cross site scripting
- FastCMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 16 Feb 2025
CVE-2024-7733 CVE record

CVSS 5.3 Medium

FastCMS New Article Category Page cross site scripting
- FastCMS
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2024
CVE-2023-1111 CVE record

CVSS 5.1 Medium

FastCMS New Article Tab cross site scripting
- FastCMS
- Cross-site scripting (XSS)
Not analysed yet 24 May 2024
CVE-2023-1191 CVE record

CVSS 4.7 Medium

fastcms ZIP File TemplateController.java path traversal
- fastcms
- Path traversal
Not analysed yet 6 Mar 2023
CVE-2023-0651 CVE record

CVSS 5.3 Medium

FastCMS Template Management unrestricted upload
- FastCMS
- Unrestricted file upload
Not analysed yet 2 Feb 2023
CVE-2022-4300 CVE record

CVSS 6.3 Medium

FastCMS Template edit injection
- FastCMS
- CWE-707
Not analysed yet 6 Dec 2022