FastCMS Cross-Site Scripting Vulnerability in Template Menu Component

A cross-site scripting (XSS) vulnerability has been identified in FastCMS versions through 0.1.5. This issue affects the Template Menu component, specifically within the file '/fastcms.html#/template/menu'. The vulnerability arises from improper handling of user input, allowing for the injection of malicious scripts that could be executed in the context of the user’s browser. The vulnerability can be exploited remotely, but requires authentication and user interaction.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the victim's browser.