← All advisories

Medium severity4.8NVD Advisory· Published Jun 24, 2020· Updated Jun 17, 2026

CVE-2020-15041

CVE-2020-15041

Description

PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.

Affected products

3

PHP-Fusion/Phpfusion
cpe:2.3:a:php-fusion:php-fusion:9.03.60:*:*:*:*:*:*:*
PHP-Fusion/PHP-Fusiondescription
PHP-Fusion/PHP-Fusion CMSllm-fuzzy
Range: = 9.03.60

Patches

Vulnerability mechanics

References

1

github.com/php-fusion/PHP-Fusion/issues/2330nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.