CVE-2020-26046

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables

published January 5, 2021

CVSS
—
EPSS
1%
Percentile
51.0
In the wild
Unconfirmed
What it is

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00661 · 51.0th percentile
Published
2021-01-05T14:17Z
EPSS history
Timeline
  • 05 JAN 14:17Z
    FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables
    cvelistv5