| Package | Affected versions | Patched versions |
|---|---|---|
| php fusion | = 6.0.105 |
Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free