CVE-2019-15228

FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console

published August 19, 2019

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00731 · 53.8th percentile
Published
2019-08-19T23:28Z
EPSS history
Timeline
  • 19 AUG 23:28Z
    FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console
    cvelistv5