Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web script or HTML via the (1) shout_name field in shoutbox_panel.php and the (2) comments field in comments_include.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Fusion多个跨站脚本攻击漏洞
Vulnerability Description
PHP-Fusion 6.00.304之前的版本中存在跨站脚本攻击(XSS)漏洞。远程攻击者可以借助(1)shoutbox_panel.php中的shout_name 字段和(2)comments_include.php中的comments字段注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A