Phpfox vulnerabilities
We track 2 vulnerabilities in Phpfox products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 22, 2024.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Phpfox vulnerabilities
- 7.1 High severity
Phpfox: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the History parameter.
- 9.8 Critical severity
Phpfox: Deserialization of Untrusted Data
An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to