2 matches found
CVE-2020-23179
A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...
5.4CVSS0.00472EPSS
SaveExploits1References1
CVE-2020-23179: Improper Neutralization of Input During Web Page Generation
A stored cross site scripting XSS vulnerability in administration/settingsmain.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Site footer" field...
5.4CVSS5.6AI score0.00472EPSS
SaveExploits1References2
20