Cross site scripting

2021-07-0218:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

25.0%

JSON

A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

CPENameOperatorVersion
php-fusioneq9.03.60

CPE	Name	Operator	Version
	php-fusion	eq	9.03.60

References

github.com/phpfusion/PHPFusion/issues/2331

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for PRION:CVE-2020-23185