CVE-2005-2074: PHP Fusion

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the (1) news_body, (2) article_description, or (3) article_body parameters to submit.php.

Affected products

• PHP Fusion PHP Fusion: version 6.0.105 only

Published 2005-06-29. Last modified 2026-06-16.