CVE-2021-44607

A Cross Site Scripting XSS vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file...

CVE-2021-44607

FUEL-CMS 1.5.1 is affected by a Cross-Site Scripting (XSS) vulnerability in the Assets page via an SVG file. The root cause, per CNVD-2022-71119, is lack of proper validation of client-side data by the web application. Affected product: FUEL-CMS (Codeligniter-based CMS). Concretely, the issue is ...