Medium severity5.4NVD Advisory· Published Feb 12, 2025· Updated Jun 17, 2026
CVE-2024-57605
CVE-2024-57605
Description
Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.
Affected products
3- cpe:2.3:a:thedaylightstudio:fuel_cms:1.5.2:*:*:*:*:*:*:*
- Daylight Studio/Fuel CMSdescription
- Range: =1.5.2
Patches
Vulnerability mechanics
References
1- hkohi.ca/vulnerability/3nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.