CVE-2018-16762: Thedaylightstudio Fuel CMS

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.

Affected products

• Thedaylightstudio Fuel CMS: up to and including 1.4.2

Published 2018-09-09. Last modified 2026-06-17.