EUVD-2021-27716

Malicious code in bioql PyPI...

Cross site scripting

PHPFusion 9.03.110 is affected by cross-site scripting XSS in the preg patterns filter html tag without "//" in descript function An authenticated user can trigger XSS by appending "//" in the end of text...

CVE-2021-40541

PHPFusion 9.03.110 is affected by cross-site scripting XSS in the preg patterns filter html tag without "//" in descript function An authenticated user can trigger XSS by appending "//" in the end of text...

CVE-2021-40541

PHPFusion 9.03.110 is affected by cross-site scripting XSS in the preg patterns filter html tag without "//" in descript function An authenticated user can trigger XSS by appending "//" in the end of text...

PT-2021-22929

Name of the Vulnerable Software and Affected Versions PHPFusion version 9.03.110 Description The issue is related to cross-site scripting XSS in the preg patterns filter html tag without "//" in the descript function. An authenticated user can trigger XSS by appending "//" at the end of the text...

CVE-2021-40541: Improper Neutralization of Input During Web Page Generation

PHPFusion 9.03.110 is affected by cross-site scripting XSS in the preg patterns filter html tag without "//" in descript function An authenticated user can trigger XSS by appending "//" in the end of text...