Skip to content
OpenAdvisories

Product · Php-fusion

PHPFusion

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2020-36996

    PHPFusion 9.03.50 - Persistent Cross-Site Scripting

    PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print …

    Php-fusion PHPFusion
  • Medium 5.4
    CVE-2023-53928

    PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload

    PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when vie…

    Php-fusion PHPFusion