Known vulnerabilities in FUEL CMS
Vendor:
David McReynolds
Software:
FUEL CMS
Software CPE:
cpe:2.3:a:daylightstudio:fuel_cms:*:*:*:*:*:*:*:*
Website:
https://github.com/daylightstudio
Total vulnerabilities:
2
Public exploits:
1
Known exploited (KEV):
1
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU66523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 1.5.2 | 16.08.2022 |
SB2022081611 |
||
| #VU49029 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2020-17463 |
CWE-89 | High | 1.4.8 | 13.08.2020 |
SB2020081317 |