Description

Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts are enabled, allows remote authenticated users to inject arbitrary web script or HTML via the URI, related to the FUSION_QUERY constant.

Remediation

References

CVE-2007-3559

Related Vulnerabilities

WordPress Plugin Really Simple Guest Post Local File Inclusion (1.0.6)

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Multiple Vulnerabilities (7.5.14)

Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2018-1000424)

Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20329)

IBMHttpServer Other Vulnerability (CVE-2002-1822)

Severity

Low

Classification

CVE-2007-3559

Tags

Missing Update Known Vulnerabilities