https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:22:40.930148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274425 EUVD-2026-274425 2026-10-06T07:22:40.976794+00:00 EUVD-2026-274425 https://cve.radiocsirt.org/vuln/fkie_cve-2020-37152 fkie_cve-2020-37152 2026-10-06T07:22:40.976833+00:00

PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The application fails to properly sanitize user input before rendering it in the browser, allowing attackers to inject arbitrary JavaScript. This can be exploited by submitting crafted input to the 'panel_content' field in panels.php, resulting in execution of malicious scripts in the context of the affected site.

 https://cve.radiocsirt.org/vuln/ghsa-f282-2298-ffhh GHSA-f282-2298-ffhh 2026-10-06T07:22:40.976867+00:00

PHP-Fusion 9.03.50 panels.php is vulnerable to cross-site scripting (XSS) via the 'panel_content' POST parameter. The application fails to properly sanitize user input before rendering it in the browser, allowing attackers to inject arbitrary JavaScript. This can be exploited by submitting crafted input to the 'panel_content' field in panels.php, resulting in execution of malicious scripts in the context of the affected site.