Fuel Cms Security Vulnerabilities and Issues — Fuel Cms CVE List

Lucene search

ThedaylightstudioFuel Cms

3 matches found

CVE•added 2018/12/13 6:29 p.m.•35 views

CVE-2018-20136

XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2018/12/13 6:29 p.m.•31 views

CVE-2018-20137

XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page data management, as demonstrated by the pages/edit/1?lang=english URI.

4.8CVSS4.9AI score0.00235EPSS

CVE•added 2021/03/10 2:15 p.m.•30 views

CVE-2020-28705

FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.

4.3CVSS4.6AI score0.00141EPSS