PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.
php-fusion php-fusion 9.03.60