← All advisories

Medium severity5.4OSV Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2021-44607

CVE-2021-44607

Description

A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Daylight Studio/FuelCMSOSV
Range: 1.0.3, 1.0.4, 1.0.5, …
Fuel CMS/Fuel CMSllm-fuzzy
Range: =1.5.1

Patches

Vulnerability mechanics

References

1

github.com/daylightstudio/FUEL-CMS/issues/589nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.