VendorsThe Daylight Studiofuel_cms1.4.13
Vulnerabilities

The Daylight Studio FUEL CMS 1.4.13

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2021-36570
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete/2---.
Published 2023-02-03 · Modified
8.8EPSS 0.007
CVE-2021-36569
Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2.
Published 2023-02-03 · Modified
8.8EPSS 0.004
CVE-2020-28705
FUEL CMS 1.4.13 contains a cross-site request forgery (CSRF) vulnerability that can delete a page via a post ID to /pages/delete/3.
Published 2021-03-10 · Modified
4.3EPSS 0.006