Description
FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors.
Unscored
CVE-2020-26046
EUVD-2020-18676GHSA-43m5-x878-2c62
FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vu…
Published Jan 5, 2021 · Updated Aug 4, 2024 · Assigned by mitre