An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.

Published Mar 26, 2026 · Updated Jul 5, 2026 · Assigned by mitre