CVE-2022-34561

MEDIUM 4.3CVE-2022-34561 · Published 22/04/2024 · updated 17/06/2026

In short

CVE-2022-34561 is a MEDIUM (CVSS 4.3) vulnerability affecting phpfox (phpfox).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
phpfox phpfox	`= 4.8.9`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter.

References

mohammedshine.github.io/vulnresearch.html · Third Party Advisory
v4.phpfox.com · Broken Link

More vulnerabilities in phpfox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

phpfox

= 4.8.9

No fix yet

More vulnerabilities in phpfox

See all →