Skip to content
OpenAdvisories
Unscored CVE-2020-23184 EUVD-2020-15937GHSA-vcfw-5xfq-9pf2

A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated a…

Published Jul 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field.

References