- Vendor / Project
- Fuel CMS
- Product
- Fuel CMS
- Date added
- Dec 10, 2021
- Due date
- Jun 10, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-89
Description
FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.
Required action
Apply updates per vendor instructions.