CVE-2014-8597: XSS
Published Feb 17, 2022
·Updated
A reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel.
Affected Software
1 affected component
PHP-Fusion Phpfusion=7.02.07
Event History
Feb 17, 2022
CVE Published
via MITRE·07:10 PM
Data Sourced
via MITRE·07:10 PM
Description
Frequently Asked Questions
1
What is CVE-2014-8597?
CVE-2014-8597 is a reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 that allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel.
2
What is the severity of CVE-2014-8597?
The severity of CVE-2014-8597 is medium with a CVSS score of 6.1.
3
How does CVE-2014-8597 affect PHP-Fusion?
CVE-2014-8597 affects PHP-Fusion version 7.02.07.
4
How can remote attackers exploit CVE-2014-8597?
Remote attackers can exploit CVE-2014-8597 by injecting arbitrary web script or HTML via the status parameter in the CMS admin panel.
5
Is there a fix for CVE-2014-8597?
Yes, a fix for CVE-2014-8597 is available. It is recommended to update PHP-Fusion to a patched version.