GCVE - cpe:2.3:a:thedaylightstudio:fuel

Approved changes feed: RSS · Atom

cpe:2.3:a:thedaylightstudio:fuel_cms:1.4.6:*:*:*:*:*:*:*

part: a version: 1.4.6 update: *

Vendor	Thedaylightstudio (`2c618928-c5f4-53fe-a0ef-75814c776c2a`)
Product	Fuel Cms (`87f65c0e-5712-50af-b1c8-b6bffef6a330`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/daylightstudio/fuel-cms`	purl2cpe	2026-06-01 10:16:27.202417

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-22153`	vulnerable	2026-06-08 05:22:31.284340	Details available File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file to the upload parameter in the navigation function. Published: 2023-07-03T00:00:00.000Z Updated: 2024-11-22T18:20:32.677Z Open on db.gcve.eu Reference links https://github.com/daylightstudio/FUEL-CMS/issues/553	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22152`	vulnerable	2026-06-08 05:22:31.283916	Details available Cross Site Scripting vulnerability in daylight studio FUEL- CMS v.1.4.6 allows a remote attacker to execute arbitrary code via the page title, meta description and meta keywords of the pages function. Published: 2023-07-03T00:00:00.000Z Updated: 2024-11-22T18:21:05.161Z Open on db.gcve.eu Reference links https://github.com/daylightstudio/FUEL-CMS/issues/552	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-22151`	vulnerable	2026-06-08 05:22:31.283422	Details available Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests parameter of the upload function. Published: 2023-07-03T00:00:00.000Z Updated: 2024-11-25T18:19:46.584Z Open on db.gcve.eu Reference links https://github.com/daylightstudio/FUEL-CMS/issues/551	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.