Description

Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2008-6850

Related Vulnerabilities

MyBB Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2022-39265)

WordPress Configuration Vulnerability (CVE-2013-2205)

Atlassian Jira Other Vulnerability (CVE-2019-14997)

WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5317)

Severity

Medium

Classification

CVE-2008-6850 CWE-707

Tags

Missing Update Known Vulnerabilities