← Database

CVE-2021-44937

MEDIUM CVSS: 5.3 Published: 2021-12-14 Modified: 2026-06-17

Description

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied.

Affected Platforms

Glfusion Glfusion

Weakness Type

CWE-287

References