Lucene search
ThedaylightstudioFuel Cms1.4.13
3 matches found
CVE-2021-36569
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2.
8.8CVSS8.8AI score0.00243EPSS
CVE-2021-36570
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---.
8.8CVSS8.8AI score0.00264EPSS
CVE-2020-28705
FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.
4.3CVSS4.6AI score0.00141EPSS