PT-2020-13218

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.50 Description The issue allows remote attackers to inject arbitrary web script or HTML via the go parameter to "faq/faq admin.php" or "shoutbox panel/shoutbox admin.php" API endpoints. This can lead to cross-site...