Security Advisory

CVE-2020-12706

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-07 19:09:20
Last updated 2024-08-04 12:04:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go parameter to faq/faq_admin.php or shoutbox_panel/shoutbox_admin.php