medium4.8
CVE-2018-20136
XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.
Impact
XSS exists in FUEL CMS 1.4.3 via the Header or Body in the Layout Variables during new-page creation, as demonstrated by the pages/edit/1?lang=english URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thedaylightstudio | Fuel Cms | Version 1.4.3 |