Description
An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a session replay attack and impersonate the victim user.
Unscored
CVE-2020-23178
EUVD-2020-15931GHSA-v65p-mxx5-r553
An issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out, allowing for an attacker to perform a ses…
Published Jul 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre