Records40All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
Thedaylightstudio records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
An issue in the /parser/dwoo component of Daylight Studio FuelCMS v1.5.2 allows attackers to execute arbitrary code via crafted PHP code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00656 · Published 2026-03-26 · No fix listed CWE-94
