Approved changes feed: RSS · Atom

cpe:2.3:a:php-fusion:phpfusion:7.02.07:*:*:*:*:*:*:*

part: a version: 7.02.07 update: *

VendorPhp Fusion (9882a299-fb6b-5a33-aa4e-52dbde0ad700)
ProductPhpfusion (4ddda480-2c76-53da-9a0d-8b9160bf9351)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/phpfusion/phpfusion purl2cpe 2026-06-01 10:15:01.240037
pkg:sourceforge/product/php-fusion purl2cpe 2026-06-01 10:15:01.240041

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8597 vulnerable 2026-06-08 05:06:09.688240 Details available
A reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote attackers to inject arbitrary web script or HTML via the status parameter in the CMS admin panel.
Published: 2022-02-17T19:10:01.000Z
Updated: 2024-08-06T13:25:59.967Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.