<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: fearlesscms</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-56431: Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to ca</title><link>https://patchthecve.com/cve/CVE-2025-56431.html</link><guid>https://patchthecve.com/cve/CVE-2025-56431.html</guid><pubDate>Wed, 17 Jun 2026 09:42:36 +0000</pubDate><description>HIGH 7.5: Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the file_get_contents() function.</description></item><item><title>CVE-2025-56430: Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to ca</title><link>https://patchthecve.com/cve/CVE-2025-56430.html</link><guid>https://patchthecve.com/cve/CVE-2025-56430.html</guid><pubDate>Wed, 17 Jun 2026 09:42:36 +0000</pubDate><description>HIGH 7.5: Directory Traversal vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to cause a denial of service via the plugin-handler.php and the deleteDirectory function.</description></item><item><title>CVE-2025-56429: Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to o</title><link>https://patchthecve.com/cve/CVE-2025-56429.html</link><guid>https://patchthecve.com/cve/CVE-2025-56429.html</guid><pubDate>Wed, 17 Jun 2026 09:42:35 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting vulnerability in Fearless Geek Media FearlessCMS v.0.0.2-15 allows a remote attacker to obtain sensitive information via the login.php component.</description></item></channel></rss>