PT-2021-10930

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.60 Description The issue is a Cross Site Scripting XSS vulnerability. It occurs via the 'New Shout' feature in the /infusions/shoutbox panel/shoutbox admin.php file. Recommendations For PHP-Fusion version 9.03.60,...

PT-2020-13218

Name of the Vulnerable Software and Affected Versions PHP-Fusion version 9.03.50 Description The issue allows remote attackers to inject arbitrary web script or HTML via the go parameter to "faq/faq admin.php" or "shoutbox panel/shoutbox admin.php" API endpoints. This can lead to cross-site...