Unscored CVE-2019-15229 EUVD-2019-6241GHSA-c5g5-4292-mj67

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the admin…

Published Aug 19, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

FUEL CMS 1.4.4 has CSRF in the blocks/create/ Create Blocks section of the Admin console. This could lead to an attacker tricking the administrator into executing arbitrary code via a specially crafted HTML page.

References

https://github.com/daylightstudio/FUEL-CMS/issues/536
https://www.sevenlayers.com/index.php/238-fuelcms-1-4-4-csrf