Skip to content

Thedaylightstudio Fuel Cms vulnerabilities

thedaylightstudio fuel cms An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated... CVE-2026-30459 7.1 HighApril 16, 2026
thedaylightstudio fuel cms Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution ... CVE-2026-30461 8.3 HighApril 15, 2026
thedaylightstudio fuel cms Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution ... CVE-2026-30460 8.8 HighApril 7, 2026
thedaylightstudio fuel cms Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the ... CVE-2026-30463 7.7 HighMarch 26, 2026
thedaylightstudio fuel cms An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset... CVE-2026-30458 9.1 CriticalMarch 26, 2026
thedaylightstudio dwoo, fuel cms +1 more An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to... CVE-2026-30457 9.8 CriticalMarch 26, 2026
thedaylightstudio fuel cms Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to... CVE-2024-57605 5.4 MediumFebruary 12, 2025
thedaylightstudio fuel cms A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run... CVE-2024-25369 6.1 MediumFebruary 22, 2024
thedaylightstudio fuel cms Withdrawn Advisory: Daylight Studio FUEL-CMS SQLi Vulnerability CVE-2020-24950 8.8 HighAugust 11, 2023
thedaylightstudio fuel cms File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code... CVE-2020-22153 9.8 CriticalJuly 3, 2023
thedaylightstudio fuel cms Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker... CVE-2020-22152 5.4 MediumJuly 3, 2023
thedaylightstudio fuel cms Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code... CVE-2020-22151 9.8 CriticalJuly 3, 2023
thedaylightstudio fuel cms Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at ... CVE-2023-33557 8.8 HighJune 9, 2023
thedaylightstudio fuel cms Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run... CVE-2021-36570 8.8 HighFebruary 3, 2023
thedaylightstudio fuel cms Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run... CVE-2021-36569 8.8 HighFebruary 3, 2023
thedaylightstudio fuel cms A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via... CVE-2021-44117 Public exploit 8.8 HighJune 10, 2022
thedaylightstudio fuel cms A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an... CVE-2022-28599 5.4 MediumMay 3, 2022
thedaylightstudio fuel cms Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection. CVE-2022-27156 5.4 MediumApril 11, 2022
thedaylightstudio fuel cms A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG... CVE-2021-44607 5.4 MediumFebruary 23, 2022
thedaylightstudio fuel cms FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items CVE-2021-38727 9.8 CriticalSeptember 9, 2021
thedaylightstudio fuel cms FUEL CMS 1.5.0 login.php contains a cross-site request forgery (CSRF) vulnerability CVE-2021-38721 6.5 MediumSeptember 9, 2021
thedaylightstudio fuel cms FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items CVE-2021-38723 8.8 HighSeptember 9, 2021
thedaylightstudio fuel cms Fuel CMS 1.5.0 has a brute force vulnerability in fuel/modules/fuel/controllers/Login.php CVE-2021-38725 5.3 MediumSeptember 9, 2021
thedaylightstudio fuel cms A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config... CVE-2021-38290 8.1 HighAugust 9, 2021
thedaylightstudio fuel cms FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page... CVE-2020-28705 4.3 MediumMarch 10, 2021
thedaylightstudio fuel cms FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1.... CVE-2020-24791 9.8 CriticalMarch 10, 2021
thedaylightstudio fuel cms An issue was discovered in FUEL CMS 1.4.7. There is a escalation of privilege vulnerability to... CVE-2020-23722 8.8 HighMarch 10, 2021
thedaylightstudio fuel cms An issue was discovered in FUEL CMS V1.4.7. An attacker can use a XSS payload and bypass a filter... CVE-2020-23721 5.4 MediumMarch 10, 2021
thedaylightstudio fuel cms FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie... CVE-2020-26046 5.4 MediumJanuary 5, 2021
thedaylightstudio fuel cms FUEL CMS 1.4.11 allows SQL Injection via parameter 'name' in /fuel/permissions/create/.... CVE-2020-26045 9.8 CriticalJanuary 5, 2021
thedaylightstudio fuel cms In FUEL CMS 11.4.12 and before, the page preview feature allows an anonymous user to take... CVE-2020-26167 9.8 CriticalNovember 4, 2020
fuel cms cms, thedaylightstudio fuel cms +1 more FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or... CVE-2020-17463 In KEV EPSS 89.7% 9.8 CriticalAugust 13, 2020
thedaylightstudio fuel cms FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This... CVE-2019-15229 8.8 HighAugust 19, 2019
thedaylightstudio fuel cms FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to... CVE-2019-15228 5.4 MediumAugust 19, 2019
thedaylightstudio fuel cms FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account. CVE-2018-20188 8.8 HighDecember 17, 2018
thedaylightstudio fuel cms XSS exists in FUEL CMS 1.4.3 via the Page title, Meta description, or Meta keywords during page... CVE-2018-20137 4.8 MediumDecember 13, 2018
thedaylightstudio fuel cms XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page... CVE-2018-20136 4.8 MediumDecember 13, 2018
thedaylightstudio fuel cms FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/... CVE-2018-16763 Public exploit EPSS 82.9% 9.8 CriticalSeptember 9, 2018
thedaylightstudio fuel cms FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages... CVE-2018-16762 9.8 CriticalSeptember 9, 2018
thedaylightstudio fuel cms Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows... CVE-2018-16416 8.8 HighSeptember 3, 2018