medium4.8
CVE-2020-23702
Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
Impact
Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php-Fusion | Php-Fusion | Version 9.03.60 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/phpfusion/PHPFusion/issues/2328
- https://user-images.githubusercontent.com/62001260/82175522-47169980-98fe-11ea-9a8e-93622aab7cf4.PNG
- https://github.com/phpfusion/PHPFusion/issues/2328
- https://user-images.githubusercontent.com/62001260/82175522-47169980-98fe-11ea-9a8e-93622aab7cf4.PNG