CVE-2020-26046

Published: 2021-01-05T15:15Z

Last Modified: 2024-11-21T05:19Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

FUEL CMS 1.4.11 has stored XSS in Blocks/Navigation/Site variables. This could lead to cookie stealing and other malicious actions. This vulnerability can be exploited with an authenticated account and also impact other visitors. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt