Secunia Security Advisory - Two vulnerabilities have been reported in PHP-Fusion, which can be exploited by malicious people to conduct cross-site scripting attacks and potentially perform an identity spoof.
6af7e65f6fe39ac08b9f872dd5c66797e6a667bcdda07d9e131750288188b19e