Cross-site Scripting

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to f…CVE-2013-1804Php-Fusion · 4.4% likely

   CWE-79

2. Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go parameter to faq/faq_admin.php or shou…CVE-2020-12706Php-Fusion · 2.9% likely

   CWE-79

3. Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.CVE-2012-6043Php-Fusion · 1.6% likely

   CWE-79

4. Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature.CVE-2020-23754Php-Fusion · 1.6% likely

   CWE-79

5. Cross-site scripting (XSS) vulnerability in messages.php in PHP-Fusion 6.01.17 and 7.00.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-6850Php-Fusion · 1.1% likely

   CWE-79

6. Cross-site scripting (XSS) vulnerability in PHP-Fusion 9.CVE-2015-8375Php-Fusion · 1.0% likely

   CWE-79

7. Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the cat_id parameter to downloads/downloads.p…CVE-2020-12708Php-Fusion · 0.9% likely

   CWE-79

8. A reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin…CVE-2014-8597Php-Fusion · 0.8% likely

   CWE-79

9. PHP-Fusion 9.03 allows XSS on the preview page.CVE-2020-17450Php-Fusion · 0.8% likely

   CWE-79

10. CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTMLCVE-2021-28280Php-Fusion · 0.7% likely

    CWE-79

11. In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature. The protection mec…CVE-2020-12718Php-Fusion · 0.7% likely

    CWE-79

12. Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.CVE-2020-23702Php-Fusion · 0.6% likely

    CWE-79

13. An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags…CVE-2020-12438Php-Fusion · 0.6% likely

    CWE-79

14. PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descript() function An authenticated user can trigger XSS by appe…CVE-2021-40541Php-Fusion · 0.6% likely

    CWE-79

15. PHP-Fusion 9.03 allows XSS via the error_log file.CVE-2020-17449Php-Fusion · 0.5% likely

    CWE-79

16. PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field.CVE-2020-15041Php-Fusion · 0.5% likely

    CWE-79

17. PHP-Fusion 9.03.60 is affected by Cross Site Scripting (XSS) via infusions/member_poll_panel/poll_admin.php.CVE-2020-23658Php-Fusion · 0.5% likely

    CWE-79

18. A stored cross site scripting (XSS) vulnerability in administration/settings_main.php of PHP-Fusion 9.03.50 allows authenticated attackers to execute arbitrary web scripts or HTML…CVE-2020-23179Php-Fusion · 0.5% likely

    CWE-79

19. A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or…CVE-2020-23185Php-Fusion · 0.4% likely

    CWE-79

20. A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web script…CVE-2020-23184Php-Fusion · 0.4% likely

    CWE-79

21. A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via…CVE-2020-23181Php-Fusion · 0.4% likely

    CWE-79

22. PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)CVE-2020-37152PHP-Fusion · CVSS 5.1 · 0.3% likely

    CWE-79

23. PHPFusion 9.03.50 - Persistent Cross-Site ScriptingCVE-2020-36996Php-Fusion · CVSS 6.4 · 0.3% likely

    CWE-79

24. PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager UploadCVE-2023-53928Php-fusion · CVSS 5.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.