Vulnerabilities > Thedaylightstudio > Fuel CMS > 1.4.11
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-08-09 | CVE-2021-38290 | Injection vulnerability in Thedaylightstudio Fuel CMS A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. | 6.8 |
2021-01-05 | CVE-2020-26046 | Cross-site Scripting vulnerability in Thedaylightstudio Fuel CMS 1.4.11 FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. | 4.3 |
2021-01-05 | CVE-2020-26045 | SQL Injection vulnerability in Thedaylightstudio Fuel CMS 1.4.11 FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/. | 7.5 |
2020-11-04 | CVE-2020-26167 | Information Exposure vulnerability in Thedaylightstudio Fuel CMS In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take complete ownership of any account including an administrator one. | 10.0 |