medium5.4
CVE-2024-25369
A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafted string after the group_id parameter.
Impact
A reflected Cross-Site Scripting (XSS) vulnerability in FUEL CMS 1.5.2allows attackers to run arbitrary code via crafted string after the group_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thedaylightstudio | Fuel Cms | Version 1.5.2 |