← Database

CVE-2021-36569

HIGH CVSS: 8.8 Published: 2023-02-03 Modified: 2026-06-17

Description

Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2.

Affected Platforms

Thedaylightstudio Fuel Cms

Weakness Type

CWE-352, CWE-352

References