Description

A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter,

Remediation

References

CVE-2020-14960

Related Vulnerabilities

qdPM Multiple Cross-site Scripting (XSS) Vulnerabilities (CVE-2015-3883)

WordPress Plugin Google Analytics Top Content Widget Cross-Site Scripting (1.5.6)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-4349)

Joomla! Core 3.x.x Cross-Site Scripting (3.6.0 - 3.9.6)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Unspecified Vulnerability (5.1.2)

Severity

High

Classification

CVE-2020-14960 CWE-138 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities