Lucene search
PRIOn knowledge basePRION:CVE-2020-12718HistoryMay 08, 2020 - 12:15 a.m.
Cross site scripting
2020-05-0800:15:00
PRIOn knowledge base
www.prio-n.com
1
In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature. The protection mechanism can be bypassed by using HTML event handlers such as ontoggle.
| CPE | Name | Operator | Version |
|---|---|---|---|
| php-fusion | eq | 9.03.50 |
Related
cve
cve
CVE-2020-12718
2020-05-08 00:15:11
nvd
nvd
CVE-2020-12718
2020-05-08 00:15:11
cvelist
cvelist
CVE-2020-12718
2020-05-07 23:29:26
openvas
openvas
PHP-Fusion < 9.03.60 Multiple Vulnerabilities
2020-05-11 00:00:00