CVE-2021-44935

Published December 14th, 2021

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php. The attacker can complete the attack remotely without interaction.

glFusion/glfusionUNAVAILABLE

glFusion CMS - Advanced Content Management with Style

GitHub