What’s Vulnerable › Products

PHPFusion vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your PHPFusion version is affected

Latest PHPFusion vulnerabilities

• CVE-2020-37152 — PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) (CVSS 6.1)
• CVE-2020-37137 — PHP-Fusion 9.03.50 - 'panels.php' Eval Injection (CVSS 9.8)
• CVE-2020-36996 — PHPFusion 9.03.50 - Persistent Cross-Site Scripting (CVSS 6.4)
• CVE-2023-53928 — PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload (CVSS 6.1)
• CVE-2023-4480 — Arbitrary File Read in Fusion File Manager (CVSS 5.5)
• CVE-2023-2453 — Local file Inclusion (LFI) in Forum Infusion via Directory Traversal (CVSS 8.8)
• CVE-2022-3152 — Unverified Password Change in phpfusion/phpfusion (CVSS 8.8)
• CVE-2014-8597 — (CVSS 6.1)
• CVE-2020-23754 — (CVSS 9.6)
• CVE-2021-40189 — (CVSS 7.2)
• CVE-2021-40188 — (CVSS 7.2)
• CVE-2021-40541 — (CVSS 6.1)
• CVE-2021-28280 — (CVSS 6.1)
• CVE-2020-35687 — (CVSS 4.3)