PT-2021-10940

Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 9.03.50 Description: The issue is related to a Cross Site Scripting XSS vulnerability, which allows attackers to execute arbitrary code via the polls feature. This is made possible through the poll admin.php file in the...

PT-2020-15573

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description The issue concerns Cross Site Scripting XSS that can be executed via the infusions/member poll panel/poll admin.php file. Recommendations For PHP-Fusion version 9.03.60, update to a newer version that...