Lucene search
K

108 matches found

CNNVD
CNNVD
added 2026/02/05 12:0 a.m.3 views

PHPFusion 跨站脚本漏洞

PHPFusion is an open-source, lightweight content management system developed by Malaysia-based PHPFusion Company, based on MySQL and PHP technologies. This system includes modules for news, articles, and forums. Version PHPFusion 9.03.50 contains a cross-site scripting vulnerability, which stems...

6.1CVSS5.6AI score0.00014EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.3 views

PHPFusion 安全漏洞

PHPFusion is an open-source, lightweight content management system developed by Malaysia-based PHPFusion Company, based on MySQL and PHP technologies. This system includes modules for news, articles, and forums. Version PHPFusion 9.03.50 contains a security vulnerability; this vulnerability stems...

9.8CVSS6.3AI score0.00035EPSS
Exploits1References3
NVD
NVD
added 2026/01/30 5:16 p.m.2 views

CVE-2020-36996

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS0.00076EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/01/30 4:16 p.m.23 views

CVE-2020-36996 PHPFusion 9.03.50 - Persistent Cross-Site Scripting

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS0.00076EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/30 4:16 p.m.2 views

EUVD-2020-30963

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS6AI score0.00076EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/30 4:16 p.m.2 views

CVE-2020-36996

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS6AI score0.00076EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/01/30 4:16 p.m.2 views

CVE-2020-36996 PHPFusion 9.03.50 - Persistent Cross-Site Scripting

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script...

6.4CVSS6AI score0.00076EPSS
Exploits0References4
CVE
CVE
added 2026/01/30 4:16 p.m.3 views

CVE-2020-36996

CVE-2020-36996 affects PHPFusion 9.03.50. The vulnerability is a persistent cross-site scripting flaw in the print.php page that fails to sanitize user-submitted forum messages. An attacker can inject JavaScript through forum content, which then executes when the print page is generated, enabling...

6.4CVSS6AI score0.00076EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.2 views

PHPFusion cross-site scripting vulnerabilities

PHPFusion is an open-source, lightweight content management system developed by Malaysia-based PHPFusion Company, based on MySQL and PHP. This system includes modules for news, articles, and forums. Version PHPFusion 9.03.50 contains a cross-site scripting vulnerability. This vulnerability arises...

6.4CVSS5.6AI score0.00076EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.1 views

CVE-2021-28280

CSRF + Cross-site scripting XSS vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.2AI score0.00412EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/18 11:36 p.m.1 views

CVE-2023-53928

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session...

6.1CVSS6.4AI score0.00025EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/18 12:34 a.m.1 views

EUVD-2023-60203

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session...

5.4CVSS5.9AI score0.00025EPSS
Exploits1References4
NVD
NVD
added 2025/12/17 11:15 p.m.3 views

CVE-2023-53928

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session...

6.1CVSS0.00025EPSS
Exploits1References3
OSV
OSV
added 2025/12/17 11:15 p.m.1 views

CVE-2023-53928

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session...

6.1CVSS6.3AI score
Exploits0References3
CVE
CVE
added 2025/12/17 10:44 p.m.5 views

CVE-2023-53928

PHPFusion 9.10.30 is affected by a stored cross-site scripting vulnerability in the file manager, allowing attackers to upload SVGs with embedded JavaScript. When such SVGs are viewed, they can execute client-side code that may steal session information or perform other user-side actions. The vul...

6.1CVSS6AI score0.00025EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/12/17 10:44 p.m.17 views

CVE-2023-53928 PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in the file manager that allows attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload SVG files with script tags that execute arbitrary JavaScript when viewed, potentially stealing user session...

5.4CVSS0.00025EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.2 views

PHPFusion 跨站脚本漏洞

PHPFusion is an open source lightweight content management system based on MySql and PHP by PHPFusion Malaysia. The system contains modules for news, articles and forums. A cross-site scripting vulnerability exists in PHPFusion version 9.10.30, which stems from the file manager allowing the uploa...

6.1CVSS6AI score0.00025EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-27374

Malware in sbrugna...

7.2CVSS7AI score0.01953EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-14969

Malware in sbrugna...

6.1CVSS6.3AI score0.00412EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-23346

Malware in sbrugna...

4.3CVSS4.8AI score0.00161EPSS
Exploits3References3
Rows per page
Query Builder