A vulnerability described as problematic has been identified in Daylight Studio FuelCMS up to 1.5.2. This affects an unknown function of the component SVG File Handler. The manipulation results in cross site scripting.
This vulnerability is cataloged as CVE-2026-38948. The attack may be launched remotely. There is no exploit available.