Description
An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message.
High · 7.1
CVE-2026-30459
EUVD-2026-23231GHSA-c29w-82wc-qh7v
An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset tok…
Published Apr 16, 2026 · Updated Jul 5, 2026 · Assigned by mitre