CVE-2020-12708

2020-05-0719:07:58

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the cat_id parameter to downloads/downloads.php or article.php. NOTE: this might overlap CVE-2012-6043.

References

github.com/php-fusion/PHP-Fusion/issues/2310