Skip to content
OpenAdvisories

Product · fearlessgeekmedia

FearlessCMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-63190

    FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

    FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under `admin/` perform privileged operations without `isLoggedIn()` authentication checks, CSRF protection or ad…

    fearlessgeekmedia FearlessCMS
  • Critical 9.1
    CVE-2026-55695

    FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater

    FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perform_update, which pass…

    fearlessgeekmedia FearlessCMS