CVE-2020-23721: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english...

CVE-2018-20136: Improper Neutralization of Input During Web Page Generation

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI...

PT-2018-15264

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description A security issue exists in the software, where an XSS attack can be performed via the Header or Body in the Layout Variables during the creation of a new page. This is demonstrated by the...

CVE-2018-20137: Improper Neutralization of Input During Web Page Generation

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI...

PT-2018-15265

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.3 Description A security issue exists in the software, where XSS can be triggered via the Page title, Meta description, or Meta keywords during page data management. This is demonstrated by the "/pages/edit/1?lang=english"...