Code injection

2021-07-0218:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.

CPENameOperatorVersion
php-fusioneq9.03.60

CPE	Name	Operator	Version
	php-fusion	eq	9.03.60

References

github.com/phpfusion/PHPFusion/issues/2329