Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://hkohi.ca/vulnerability/3 | Exploit Third Party Advisory |
Configurations
History
09 Jul 2025, 15:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://hkohi.ca/vulnerability/3 - Exploit, Third Party Advisory | |
| First Time |
Thedaylightstudio
Thedaylightstudio fuel Cms |
|
| CPE | cpe:2.3:a:thedaylightstudio:fuel_cms:1.5.2:*:*:*:*:*:*:* |
12 Feb 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-12 22:15
Updated : 2025-07-09 15:03
NVD link : CVE-2024-57605
Mitre link : CVE-2024-57605
JSON object : View
Products Affected
thedaylightstudio
- fuel_cms
CWE
No CWE.