| Package | Affected versions | Patched versions |
|---|---|---|
| php fusion | = 6.00.100= 6.00.101= 6.00.102= 6.00.103= 6.00.104= 6.00.105= 6.00.106= 6.00.107= 6.00.108= 6.00.109= 6.00.110= 6.00.200= 6.00.204= 6.00.205= 6.00.206= 6.00.207= 6.00.300= 6.00.303 |
Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free