← Database

CVE-2004-2438

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field.

Affected Platforms

Php Fusion Php Fusion

Weakness Type

NVD-CWE-Other

References