CVE:CVE-2004-2438
CNNVD:CNNVD-200412-378
PHP-Fusion 4.01版本存在多个跨站脚本（XSS）漏洞。远程攻击者可以借助(1)Submit News，(2)Submit Link 或者(3)Submit Article字段注入任意web脚本或HTML。
solution:Upgrade php_fusion php_fusion to a higher version than 4.01,and avoid the version 4.01