CVE-2018-20136

2018-12-1318:29:00

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.

CPENameOperatorVersion
fuel-cmseq1.4.2
fuel-cmseq0.9
fuel-cmseq1.0.3
fuel-cmseq1.3.1
fuel-cmseq1.0.4
fuel-cmseq0.9.2
fuel-cmseq1.2.1
fuel-cmseq1.0.2
fuel-cmseq1.3
fuel-cmseq1.0.5