CVE-2020-17463 — Fuel CMS SQL Injection Vulnerability

CISA KEVExploited: confirmedFuel CMS

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

Vulnerability details