Description
A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Registration" field.
Remediation
References
Related Vulnerabilities
WordPress Plugin Backup and Staging by WP Time Capsule Security Bypass (1.21.15)
Oracle Database Server CVE-2014-6467 Vulnerability (CVE-2014-6467)
WordPress Plugin Oleggo LiveStream Cross-Site Scripting (0.2.6)
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-7060)
WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.10)