EUVD-2014-8434

Malware in sbrugna...

CVE-2014-8597: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel...