CVE-2020-23702: XSS
Published Jul 7, 2021
·Updated
Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutboxpanel/shoutboxadmin.php.
Affected Software
1 affected component
PHP-Fusion php-fusion=9.03.60
Event History
Jul 7, 2021
CVE Published
via MITRE·06:56 PM
Data Sourced
via MITRE·06:56 PM
Description
Frequently Asked Questions
1
What is CVE-2020-23702?
CVE-2020-23702 is a Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60.
2
How severe is CVE-2020-23702?
CVE-2020-23702 has a severity level of medium (4.8).
3
How does CVE-2020-23702 affect PHP-Fusion?
CVE-2020-23702 affects PHP-Fusion 9.03.60 through the 'New Shout' feature in /infusions/shoutbox_panel/shoutbox_admin.php.
4
What is the Common Weakness Enumeration (CWE) for CVE-2020-23702?
The CWE for CVE-2020-23702 is CWE-79 (Cross-Site Scripting).
5
Are there any references for CVE-2020-23702?
Yes, you can find references for CVE-2020-23702 at the following links: [GitHub Issue](https://github.com/phpfusion/PHPFusion/issues/2328) and [Image](https://user-images.githubusercontent.com/62001260/82175522-47169980-98fe-11ea-9a8e-93622aab7cf4.PNG).