CVE-2022-27156

Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection.

• CWE-79

• https://github.com/daylightstudio/FUEL-CMS/issues/593Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/daylightstudio/FUEL-CMS/issues/593Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Apr 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27146GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-o…5.5
• CVE-2022-27147GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-af…5.5
• CVE-2022-27148GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerabl…5.5
• CVE-2022-27149Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-2715A vulnerability has been found in SourceCodester Employee Ma…9.8
• CVE-2022-27152Roku devices running RokuOS v9.4.0 build 4200 or earlier tha…5.7
• CVE-2022-27157pearweb < 1.32 is suffers from a Weak Password Recovery Mech…9.8
• CVE-2022-27158pearweb < 1.32 suffers from Deserialization of Untrusted Dat…9.8
• CVE-2022-2716The Beaver Builder – WordPress Page Builder for WordPress is…5.4
• CVE-2022-27161Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27162CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8
• CVE-2022-27163CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admi…9.8