← Database

CVE-2026-30461

HIGH CVSS: 8.3 Published: 2026-04-15 Modified: 2026-07-05

Description

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function add_git_submodule.

Affected Platforms

Thedaylightstudio Fuel Cms

Weakness Type

CWE-77

References