critical9.8
CVE-2018-16762
FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.
Impact
FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thedaylightstudio | Fuel Cms | through 1.4.2 |