← Database

CVE-2021-44935

CRITICAL CVSS: 9.1 Published: 2021-12-14 Modified: 2026-06-17

Description

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php. The attacker can complete the attack remotely without interaction.

Affected Platforms

Glfusion Glfusion

Weakness Type

CWE-346

References