Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.
We have discovered 80 live websites that are affected by CVE-2020-23702.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 80 live websites (45% of PHPFusion install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 11 versions ( 55% of all versions) |
| 11 websites | |
| 16 websites | |
| 14 websites | |
| 12 websites | |
| 11 websites | |
| 3 websites | |
| 2 websites | |
| 2 websites | |
| 1 websites | |
| 1 websites |
| .eu | 13 websites |
| .com | 11 websites |
| .de | 10 websites |
| .nl | 8 websites |
| .pl | 7 websites |
| .co.uk | 5 websites |
| .org | 4 websites |
| .dk | 4 websites |
| .info | 2 websites |
| .net | 2 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *******.****.org | *,***,*** | ||
| *******.***.la | *,***,*** | ||
| **********.**.uk | *,***,*** | ||
| *********.com | *,***,*** | ||
| ******.ro | *,***,*** | ||
| *********.pl | *,***,*** | ||
| **********.eu | *,***,*** | ||
| ********.*******.eu | *,***,*** | ||
| ***.************.nl | *,***,*** | ||
| **************.nl | **,***,*** |