A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated malicious users to execute arbitrary web scripts or HTML via a crafted payload entered into the "Manage Theme" field.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
php-fusion php-fusion 9.03.60 |