FUEL CMS 1.4.1 allows SQL Injection via the layout, published, or search_term parameter to pages/items.Referenceshttps://github.com/daylightstudio/FUEL-CMS/issues/478