CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...

PT-2021-11208

Name of the Vulnerable Software and Affected Versions: FUEL CMS version 1.4.11 Description: The issue is related to stored XSS in Blocks/Navigation/Site variables, which could lead to cookie stealing and other malicious actions. This can be exploited with an authenticated account and also impact...

FUEL CMS 跨站脚本漏洞

FUEL CMS is a content management system based on CodeIgniter. A stored cross-site scripting vulnerability exists in the Blocks/Navigation/Site variable in FUEL CMS 1.4.11. An attacker can exploit this vulnerability to steal cookies...

CVE-2020-26046: Improper Neutralization of Input During Web Page Generation

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors...