CVE-2020-26046

2021-01-0515:15:13

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.

CPENameOperatorVersion
fuel-cmseq1.0.6
fuel-cmseq1.4.11
fuel-cmseq0.9
fuel-cmseq1.4.5
fuel-cmseq0.9.2
fuel-cmseq1.0.3
fuel-cmseq1.3.1
fuel-cmseq1.4.10
fuel-cmseq1.3
fuel-cmseq1.0.1