CVE-2020-36996: PHPFusion 9.03.50 - Persistent Cross-Site Scripting
PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script execution in victim browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36996?
CVE-2020-36996 is classified as a medium severity vulnerability due to its potential for persistent cross-site scripting attacks.
How do I fix CVE-2020-36996?
To fix CVE-2020-36996, update the PHPFusion software to the latest version that addresses this vulnerability.
What impact does CVE-2020-36996 have on PHPFusion users?
CVE-2020-36996 allows attackers to inject malicious JavaScript into forum messages, potentially compromising user sessions and data.
Is CVE-2020-36996 exploitable by unauthenticated users?
Yes, CVE-2020-36996 can be exploited by unauthenticated users who submit forum messages containing malicious scripts.
What versions of PHPFusion are affected by CVE-2020-36996?
CVE-2020-36996 specifically affects PHPFusion version 9.03.50.