← All advisories

Medium severity5.4NVD Advisory· Published Aug 26, 2020· Updated Jun 17, 2026

CVE-2020-23658

CVE-2020-23658

Description

PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php.

Affected products

3

PHP-Fusion/Phpfusion2 versions
cpe:2.3:a:php-fusion:php-fusion:9.03.60:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php-fusion:php-fusion:9.03.60:*:*:*:*:*:*:*
- (no CPE)range: = 9.03.60
PHP-Fusion/PHP-Fusiondescription

Patches

Vulnerability mechanics

References

1

github.com/php-fusion/PHP-Fusion/issues/2325nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.