CVE-2020-17449 – PHP-Fusion 9.03 allows XSS via the error_log file.

PHP-Fusion 9.03 allows XSS via the error_log file.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17449

Reference (s):

• https://sec-consult.com/en/blog/advisories/multiple-cross-site-scripting-xss-vulnerabilities-in-php-fusion-cms/