CVE-2020-26046 | BDVDB-2026-146913 Detail

Description#

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://getfuelcms.com
https://github.com/daylightstudio/FUEL-CMS/issues/574

Exploit#

No public exploit known

History#

Version 12021-01-05Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.