← All advisories

High severity8.8OSV Advisory· Published Dec 17, 2018· Updated Jun 17, 2026

CVE-2018-20188

CVE-2018-20188

Description

FUEL CMS 1.4.3 has CSRF via users/create/ to add an administrator account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Daylight Studio/FuelCMSOSV
Range: 1.0.3, 1.0.4, 1.0.5, …
Thedaylightstudio/Fuel CMS
cpe:2.3:a:thedaylightstudio:fuel_cms:1.4.3:*:*:*:*:*:*:*
Fuel CMS/Fuel CMSllm-fuzzy
Range: =1.4.3

Patches

Vulnerability mechanics

References

1

github.com/m3lon/CVE/blob/master/CSRF/FUELCMS%20CSRF.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.