| Título | daylightstudio FUEL-CMS 1.5.2 XSS |
|---|
| Descrição | A stored XSS flaw exists in FUEL-CMS 1.5.2: the application fails to sanitize the `key` parameter before persisting and later rendering it. Consequently, an attacker can embed arbitrary JavaScript that will automatically execute whenever a victim’s browser loads the affected page. |
|---|
| Fonte | ⚠️ https://github.com/YZS17/CVE/blob/main/fuelcms/xss4.md |
|---|
| Utilizador | XU-17 (UID 86055) |
|---|
| Submissão | 28/08/2025 20h43 (há 1 Ano) |
|---|
| Moderação | 12/09/2025 10h39 (15 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 167287 [Fuel CMS 1.4.11 Blocks/Navigation/Site Script de Site Cruzado] |
|---|
| Pontos | 0 |
|---|