CVE-2020-23182: PHP-Fusion

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Shoutbox message panel.

Affected products

• PHP-Fusion PHP-Fusion: version 9.03.60 only

Published 2021-07-02. Last modified 2026-06-17.