Issues

• FUEL CMS 1.5.2 Password Reset SQL Injection

  daylightstudio/FUEL-CMS#611 · Filter by author youmulijiang opened on Jun 7, 2026

• Authenticated XSS in page preview

  daylightstudio/FUEL-CMS#610 · Filter by author ghost opened on Jan 8, 2025

• A stored XSS vulnerability exists in FUEL-CMS-1.5.2

  daylightstudio/FUEL-CMS#608 · Filter by author DMIND-NLL opened on Mar 29, 2024

• cannot get to the admin page

  daylightstudio/FUEL-CMS#602 · Filter by author GrandM1961 opened on Feb 19, 2023
  4

• Prolem when create page from fuel admin page

  daylightstudio/FUEL-CMS#601 · Filter by author sontq opened on Dec 9, 2022
  15

• Support page link to "Get in touch" leads to 404

  daylightstudio/FUEL-CMS#600 · Filter by author olivierlacan opened on Jul 31, 2022

• Docker

  daylightstudio/FUEL-CMS#599 · Filter by author noraj opened on Jul 14, 2022

• Create SECURITY.md

  daylightstudio/FUEL-CMS#596 · Filter by author JamieSlome opened on Jun 17, 2022
  1

• A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS-1.5.1

  daylightstudio/FUEL-CMS#595 · Filter by author GiDunPar opened on Apr 2, 2022

• HTML Injection Issue

  daylightstudio/FUEL-CMS#593 · Filter by author 74616e696d opened on Mar 13, 2022
  2

• Windows Defender Threat in MY_string_helper.php

  daylightstudio/FUEL-CMS#590 · Filter by author harkus opened on Jan 5, 2022
  1

• A stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS-1.5.1

  daylightstudio/FUEL-CMS#589 · Filter by author able403 opened on Nov 29, 2021

• CSRF in Site Variables in Fuel CMS 1.5.0

  daylightstudio/FUEL-CMS#588 · Filter by author warmachine-57 opened on Nov 18, 2021

• FUEL CMS 1.5.0 contains a cross-site request forgery (CSRF) vulnerability

  daylightstudio/FUEL-CMS#584 · Filter by author ApexSecLabs opened on Aug 10, 2021
  1

• FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items

  daylightstudio/FUEL-CMS#583 · Filter by author ApexSecLabs opened on Aug 10, 2021

• FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/logs/items

  daylightstudio/FUEL-CMS#582 · Filter by author ApexSecLabs opened on Aug 10, 2021
  1

• Wrong type in Fuel_user_model::delete()

  daylightstudio/FUEL-CMS#544 · Filter by author marcus-at-localhost opened on Sep 13, 2019
  5

• Base_post_model ignores $foreign_key ' where'

  daylightstudio/FUEL-CMS#540 · Filter by author marcus-at-localhost opened on Aug 21, 2019

• Pages select function vunerability

  daylightstudio/FUEL-CMS#533 · Filter by author Rmacar opened on Jul 31, 2019
  1

• Private var needs to be public

  daylightstudio/FUEL-CMS#532 · Filter by author polycode-nz opened on Jun 6, 2019
  5

• User Guide ++ Docu supplement ++ Advanced modules

  daylightstudio/FUEL-CMS#531 · Filter by author gordiang opened on May 8, 2019

• PHP 7.2 Warning for count() in libraries/Menu.php

  daylightstudio/FUEL-CMS#519 · Filter by author kevindeleon opened on Nov 20, 2018
  3

• Filter UTF8 Strings

  daylightstudio/FUEL-CMS#479 · Filter by author marcus-at-localhost opened on Jul 30, 2018

• location of composer.json

  daylightstudio/FUEL-CMS#476 · Filter by author marcus-at-localhost opened on Jul 6, 2018
  1

• Wrong fuel_url param

  daylightstudio/FUEL-CMS#475 · Filter by author QiAnXinCodeSafe opened on Jun 22, 2018