← Database

CVE-2026-30459

HIGH CVSS: 7.1 Published: 2026-04-16 Modified: 2026-07-05

Description

An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a crafted link placed in a valid e-mail message.

Affected Platforms

Thedaylightstudio Fuel Cms

Weakness Type

CWE-640

References