Cross site scripting

2021-01-0515:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.

CPENameOperatorVersion
fuel_cmseq1.4.11

CPE	Name	Operator	Version
	fuel_cms	eq	1.4.11

References

getfuelcms.com

github.com/daylightstudio/FUEL-CMS/issues/574