A vulnerability was found in FluentCMS 1.2.3. It has been rated as problematic. This impacts an unknown function of the component TextHTML Plugin. This manipulation causes HTML injection.
The identification of this vulnerability is CVE-2026-38947. It is possible to initiate the attack remotely. There is no exploit available.
