Cross site scripting

2021-10-1114:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.7%

JSON

PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without “//” in descript() function An authenticated user can trigger XSS by appending “//” in the end of text.

CPENameOperatorVersion
phpfusioneq9.03.110

CPE	Name	Operator	Version
	phpfusion	eq	9.03.110

References

github.com/PHPFusion/PHPFusion/issues/2373

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for PRION:CVE-2021-40541