PHP-Fusion Cross-Site Scripting Vulnerability

Php-fusion PHP-Fusion is an open source lightweight content management system based on MySql and PHP from Malaysia-based PHP-Fusion (Php-fusion). A cross-site scripting vulnerability exists in PHP-Fusion version 9.03.50, which originates in the infusions/member_poll_panel/poll_admin.php page and lacks effective filtering and escaping of user-submitted input. An attacker could use this vulnerability to execute arbitrary code.