thedaylightstudio fuel cms

Name: thedaylightstudio fuel cms
Brand: thedaylightstudio

productUS

cpe:2.3:a:thedaylightstudio:fuel_cms:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical12high12medium0low

updated 2026-10-29

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-17463US	critical9.8OT critical	89.7% (100th)	KEV	no fix	2020-08-13	= 1.4.7
CVE-2018-16763US	critical9.8	82.9% (100th)	Exploit	no fix	2018-09-09	≤ 1.4.2
CVE-2021-44117US	high8.8	1.35% (71st)	Exploit	no fix	2022-06-10	= 1.5.0
CVE-2020-26167US	critical9.8	3.43% (89th)	—	no fix	2020-11-04	≤ 1.4.12
CVE-2020-24791US	critical9.8	2.59% (85th)	—	no fix	2021-03-10	= 1.4.8
CVE-2020-26045US	critical9.8	1.87% (79th)	—	no fix	2021-01-05	= 1.4.11
CVE-2021-38727US	critical9.8	1.61% (76th)	—	no fix	2021-09-09	= 1.5.0
CVE-2020-22153US	critical9.8	1.45% (73rd)	—	no fix	2023-07-03	= 1.4.6
CVE-2020-22151US	critical9.8	1.45% (73rd)	—	no fix	2023-07-03	= 1.4.6
CVE-2018-16762US	critical9.8	1.42% (73rd)	—	no fix	2018-09-09	≤ 1.4.2
CVE-2020-24950US	high8.8	1.38% (72nd)	—	no fix	2023-08-11	= 1.4.9
CVE-2021-38290US	high8.1	1.29% (70th)	—	no fix	2021-08-09	≤ 1.5.0
CVE-2021-38723US	high8.8	1.00% (63rd)	—	no fix	2021-09-09	= 1.5.0
CVE-2020-23722US	high8.8	1.00% (63rd)	—	no fix	2021-03-10	= 1.4.7
CVE-2021-38725US	medium5.3	0.88% (59th)	—	no fix	2021-09-09	= 1.5.0
CVE-2018-16416US	high8.8	0.86% (58th)	—	no fix	2018-09-03	= 1.4
CVE-2023-33557US	high8.8	0.80% (57th)	—	no fix	2023-06-09	= 1.5.2
CVE-2026-30460US	high8.8	0.79% (56th)	—	no fix	2026-04-07	= 1.5.2
CVE-2021-36570US	high8.8	0.73% (54th)	—	no fix	2023-02-03	= 1.4.13
CVE-2019-15228US	medium5.4	0.73% (54th)	—	no fix	2019-08-20	≤ 1.4.4
CVE-2019-15229US	high8.8	0.71% (53rd)	—	no fix	2019-08-20	≤ 1.4.4
CVE-2020-26046US	medium5.4	0.66% (51st)	—	no fix	2021-01-05	= 1.4.11
CVE-2026-30457US	—	0.66% (51st)	—	no fix	2026-03-26	= 1.5.2
CVE-2021-38721US	medium6.5	0.60% (49th)	—	no fix	2021-09-09	= 1.5.0
CVE-2020-28705US	medium4.3	0.58% (48th)	—	no fix	2021-03-10	= 1.4.13
CVE-2020-22152US	medium5.4	0.58% (47th)	—	no fix	2023-07-03	= 1.4.6
CVE-2020-23721US	medium5.4	0.58% (47th)	—	no fix	2021-03-10	= 1.4.7
CVE-2022-28599US	medium5.4	0.57% (47th)	—	no fix	2022-05-03	= 1.5.1
CVE-2018-20137US	medium4.8	0.56% (46th)	—	no fix	2018-12-13	= 1.4.3
CVE-2018-20136US	medium4.8	0.56% (46th)	—	no fix	2018-12-13	= 1.4.3
CVE-2026-30461US	—	0.53% (44th)	—	no fix	2026-04-15	= 1.5.2
CVE-2018-20188US	high8.8	0.52% (44th)	—	no fix	2018-12-17	= 1.4.3
CVE-2022-27156US	medium5.4	0.49% (42nd)	—	no fix	2022-04-11	= 1.5.1
CVE-2021-44607US	medium5.4	0.49% (42nd)	—	no fix	2022-02-24	= 1.5.1
CVE-2021-36569US	high8.8	0.43% (37th)	—	no fix	2023-02-03	= 1.4.13
CVE-2024-25369US	—	0.38% (32nd)	—	no fix	2024-02-22	= 1.5.2
CVE-2026-30458US	—	0.37% (31st)	—	no fix	2026-03-26	= 1.5.2
CVE-2024-57605US	—	0.33% (25th)	—	no fix	2025-02-12	= 1.5.2
CVE-2026-30463US	—	0.32% (25th)	—	no fix	2026-03-26	= 1.5.2
CVE-2026-30459US	—	0.26% (18th)	—	no fix	2026-04-16	= 1.5.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')9 CVEs
CWE-352Cross-Site Request Forgery (CSRF)8 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan