Skip to content
OpenAdvisories

Vendor

Php-fusion

4 known vulnerabilities.

Products

PHPFusion 2 PHP Fusion 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.1
    CVE-2020-37152

    PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)

    PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The application fails to properly sanitize user input before rendering it in the browser, allowing attackers to inject arbitrary JavaScript. This…

    Php-fusion PHP Fusion
  • Medium 6.1
    CVE-2020-37137

    PHP-Fusion 9.03.50 - 'panels.php' Eval Injection

    PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitrary code through an eval() function with unsanitized POST data. Attackers can exploit the vulnerability by sending craf…

    Php-fusion PHP Fusion
  • Medium 6.4
    CVE-2020-36996

    PHPFusion 9.03.50 - Persistent Cross-Site Scripting

    PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print …

    Php-fusion PHPFusion
  • Medium 5.4
    CVE-2023-53928

    PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload

    PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when vie…

    Php-fusion PHPFusion