Medium severity5.4NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2019-15228

Description

FUEL CMS 1.4.4 has XSS in the Create Blocks section of the Admin console. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account but can also impact unauthenticated visitors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Thedaylightstudio/Fuel CMS
cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*
Range: <=1.4.4
FUEL CMS/FUEL CMSdescription
Fuel CMS/Fuel CMSllm-fuzzy
Range: =1.4.4
Daylight Studio/FuelCMSllm-fuzzy
Range: =1.4.4

Patches

Vulnerability mechanics

References

github.com/daylightstudio/FUEL-CMS/issues/536nvdExploitThird Party Advisory
www.sevenlayers.com/index.php/237-fuelcms-1-4-4-xssnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000