Php-fusion Phpfusion vulnerabilities

• php-fusion, php-fusion phpfusion +1 more PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) CVE-2020-37152 5.1 MediumFebruary 5, 2026
• php fusion fusion, php-fusion phpfusion +1 more PHP-Fusion 9.03.50 - 'panels.php' Eval Injection CVE-2020-37137 8.6 HighFebruary 5, 2026
• php-fusion phpfusion PHPFusion 9.03.50 - Persistent Cross-Site Scripting CVE-2020-36996 5.1 MediumJanuary 30, 2026
• php-fusion phpfusion PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload CVE-2023-53928 5.1 MediumDecember 17, 2025
• php-fusion phpfusion Arbitrary File Read in Fusion File Manager CVE-2023-4480 5.5 MediumSeptember 5, 2023
• php-fusion phpfusion Local file Inclusion (LFI) in Forum Infusion via Directory Traversal CVE-2023-2453 8.8 HighSeptember 5, 2023
• php-fusion phpfusion, phpfusion phpfusion/phpfusion +1 more Unverified Password Change in phpfusion/phpfusion CVE-2022-3152 9.6 CriticalSeptember 7, 2022
• php-fusion phpfusion A reflected cross-site scripting (XSS) vulnerability in PHP-Fusion 7.02.07 allows remote... CVE-2014-8597 6.1 MediumFebruary 17, 2022
• php-fusion phpfusion Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP... CVE-2020-23754 9.6 CriticalNovember 2, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager... CVE-2021-40188 7.2 HighOctober 11, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will... CVE-2021-40189 7.2 HighOctober 11, 2021
• php-fusion phpfusion PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag... CVE-2021-40541 6.1 MediumOctober 11, 2021
• php-fusion phpfusion CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote... CVE-2021-28280 6.1 MediumApril 29, 2021
• php-fusion phpfusion PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox... CVE-2020-35687 Public exploit 4.3 MediumJanuary 13, 2021