Php Fusion · Php-Fusion · CVE-2005-2783
**Name of the Vulnerable Software and Affected Versions**
PHP-Fusion versions 6.00.107 and earlier
**Description**
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via nested, malformed URL BBCode tags.
**Recommendations**
For PHP-Fusion versions 6.00.107 and earlier, update to a version later than 6.00.107 to resolve the issue.