CVE-2020-23181

A reflected cross site scripting XSS vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Manage Theme" field...

PT-2020-6388

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description The issue is related to a reflected cross site scripting XSS vulnerability in the /administration/theme.php file of PHP-Fusion. This vulnerability can be exploited by authenticated attackers to execute...