Description
PHP-Fusion 9.03 allows XSS via the error_log file.
Remediation
References
Related Vulnerabilities
WordPress Plugin FeedWordPress Multiple Vulnerabilities (2015.0426)
Lighttpd Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-4359)
WordPress Plugin GDPR CCPA Compliance Support PHP Object Injection (2.3)
Ampache Other Vulnerability (CVE-2006-5668)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-0119)