CVE-2020-12718

In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature

published May 7, 2020

CVSS
—
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature. The protection mechanism can be bypassed by using HTML event handlers such as ontoggle.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00659 · 50.9th percentile
Published
2020-05-07T23:29Z
EPSS history
Timeline
  • 07 MAY 23:29Z
    In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Preview Comment feature
    cvelistv5