CVE-2020-15041

PHP-Fusion 9.03.60 allows XSS via the administration/sitelinks.php Add Site Link field...

Design/Logic Flaw

PHP-Fusion 9.03.60 allows XSS via the administration/sitelinks.php Add Site Link field...

CVE-2020-15041

CVE-2020-15041 affects PHP-Fusion 9.03.60. A cross‑site scripting (XSS) vulnerability exists in the admin interface via the Add Site Link field in administration/site_links.php. The CNVD description notes the issue stems from a lack of proper validation of client‑side data, enabling injected scri...