Unrated severityNVD Advisory· Published Jul 2, 2021· Updated Aug 4, 2024

CVE-2020-23181

Description

A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Manage Theme" field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP-Fusion/PHP-Fusiondescription
PHP-Fusion/Phpfusionllm-fuzzy
Range: =9.03.60

Patches

Vulnerability mechanics

References

github.com/phpfusion/PHPFusion/issues/2326mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000