Read the docs

Getfuelcms

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Getfuelcms records in CISA KEV

No Getfuelcms vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 64

Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col' parameter in the Activity Log interface.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-05-16 No fix listed CWE-89
Open these records in search →