← All advisories

Medium severity5.4OSV Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2021-44607

CVE-2021-44607

Description

A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Daylight Studio/FuelCMSOSV
Range: 1.0.3, 1.0.4, 1.0.5, …
Fuel CMS/Fuel CMSllm-fuzzy
Range: =1.5.1
Thedaylightstudio/Fuel CMS
cpe:2.3:a:thedaylightstudio:fuel_cms:1.5.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/daylightstudio/FUEL-CMS/issues/589nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.