NetSight
IP …
critical9.6

CVE-2020-23754

Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via t…

Impact

Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature.

Affected products

VendorProductAffected versions
Php-FusionPhpfusion
Version 9.03.50

Weakness classification

CWE-79

References