CVE-2024-57605: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components...

CVE-2024-57605

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components...

PT-2025-6754 · Daylight Studio · Fuel Cms

Name of the Vulnerable Software and Affected Versions: Daylight Studio Fuel CMS version 1.5.2 Description: The issue allows an attacker to escalate privileges through the "fuel/blocks/" and "fuel/pages/" components. This is a Cross Site Scripting issue that can be exploited to gain elevated acces...