VendorsThe Daylight Studiofuel_cms1.5.1
Vulnerabilities

The Daylight Studio FUEL CMS 1.5.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2022-28599
A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an authenticated user to upload a malicious .pdf file which acts as a stored XSS payload. If this stored XSS payload is triggered by an administrator it will trigger a XSS attack.
Published 2022-05-03 · Modified
5.4EPSS 0.006
CVE-2022-27156
Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection.
Published 2022-04-11 · Modified
5.4EPSS 0.005
CVE-2021-44607
A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file.
Published 2022-02-23 · Modified
5.4EPSS 0.005