Skip to content
OpenAdvisories
Unscored CVE-2020-23185 EUVD-2020-15938GHSA-6f2m-vhfx-gqwf

A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attack…

Published Jul 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

References