Thedaylightstudio: >> Fuel Cms >> 1.5.2 Security Vulnerabilities
Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.
CVSS Score
5.4
EPSS Score
0.0
Published
2025-02-12
A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafted string after the group_id parameter.
CVSS Score
5.4
EPSS Score
0.001
Published
2024-02-22
Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-06-09