CVE-2024-57605: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components...

CVE-2024-57605

Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components...

PT-2025-6754 · Daylight Studio · Fuel Cms

Name of the Vulnerable Software and Affected Versions: Daylight Studio Fuel CMS version 1.5.2 Description: The issue allows an attacker to escalate privileges through the "fuel/blocks/" and "fuel/pages/" components. This is a Cross Site Scripting issue that can be exploited to gain elevated acces...

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

CVE-2021-38723

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

PT-2021-22276

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.5.0 Description The issue allows SQL Injection via the parameter col in the "/fuel/index.php/fuel/pages/items" API endpoint. This enables an attacker to inject malicious SQL code, potentially leading to unauthorized data...

CVE-2021-38723: Improper Neutralization of Special Elements used in an SQL Command

FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...

CVE-2020-23721

An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english...

PT-2021-10938

Name of the Vulnerable Software and Affected Versions FUEL CMS version 1.4.7 Description An issue was discovered in FUEL CMS, where an attacker can use a XSS payload and bypass a filter via the "/fuelCM/fuel/pages/edit/1?lang=english" API endpoint. Recommendations For FUEL CMS version 1.4.7, as a...

CVE-2020-23721: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter via /fuelCM/fuel/pages/edit/1?lang=english...