PHPFusion < 9.03.60 Multiple Vulnerabilities

PHPFusion is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-23179

CVE-2020-23179 describes a stored XSS in PHP-Fusion 9.03.50 via the Site footer field in administration/settings_main.php. An authenticated user can inject script/HTML that is stored and later rendered to other users. Affected component: PHP-Fusion’s admin settings_main.php; vulnerability type: s...