Fuel Cms@1.4.3 Security Vulnerabilities and Issues — Fuel Cms@1.4.3 CVE List

Lucene search

ThedaylightstudioFuel Cms1.4.3

3 matches found

CVE•added 2018/12/13 6:29 p.m.•35 views

CVE-2018-20136

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2018/12/17 7:29 p.m.•33 views

CVE-2018-20188

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account.

8.8CVSS8.7AI score0.00141EPSS

CVE•added 2018/12/13 6:29 p.m.•31 views

CVE-2018-20137

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI.

4.8CVSS4.9AI score0.00235EPSS