FearlessCMS vulnerabilities
CVEs whose affected-version data names the FearlessCMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-63190Critical· 9.4FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS
FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under `admin/` perform privileged operations without `isLoggedIn()` authentication checks,…
▾ Midnightfearlessgeekmedia · FearlessCMSEPSS 0.54%via CVEORG
CVE-2026-55695Critical· 9.1PoCFearlessCMS is a flat-file content management system centered on simplicity and open source
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perf…
▾ Abyssalfearlessgeekmedia · FearlessCMSEPSS 0.46%via NVD