Security Advisory
CVE-2020-23181
5.4
MEDIUM
Vulnerability Description
A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Manage Theme" field.
Published Date
July 2, 2021
Official Source
NIST NVD Advisory