CVE-2022-36180: Fusiondirectory

Critical severity, CVSS 9.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Fusiondirectory 1.3 is vulnerable to Cross Site Scripting (XSS) via /fusiondirectory/index.php?message=[injection], /fusiondirectory/index.php?message=invalidparameter&plug={Injection], /fusiondirectory/index.php?signout=1&message=[injection]&plug=106.

Affected products

• Fusiondirectory Fusiondirectory: version 1.3 only

Published 2022-11-22. Last modified 2026-07-09.