Medium severity6.1NVD Advisory· Published Apr 29, 2021· Updated Jun 17, 2026
CVE-2021-28280
CVE-2021-28280
Description
CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:php-fusion:phpfusion:9.03.110:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php-fusion:phpfusion:9.03.110:*:*:*:*:*:*:*
- (no CPE)range: = 9.03.110
- PHPFusion/PHPFusiondescription
Patches
Vulnerability mechanics
References
5- github.com/PHPFusion/PHPFusion/commit/08d6c2ea49bd06fcce32275252f5f25abe61965cnvdPatchThird Party Advisory
- github.com/PHPFusion/PHPFusion/commit/1c2b32321cf11ed1cd3ff835f8da0d172c849ce6nvdPatchThird Party Advisory
- github.com/PHPFusion/PHPFusion/commit/da9f89ae70219f357fba6fffd2dae1ec886d8a3bnvdPatchThird Party Advisory
- github.com/PHPFusion/PHPFusion/commit/fda266c3bb35c650a8c4c51b6923abdfb66ef5cdnvdPatchThird Party Advisory
- anotepad.com/notes/2skndaytnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.