🔍 What is Phpfusion?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2020-23754

CRITICAL CVSS 9.6 Nov 2, 2021

This is a Cross-Site Scripting (XSS) vulnerability in PHP-Fusion's poll administration feature that allows attackers to inject malicious scripts into web pages. Attackers can execute arbitrary code in...

CVE-2021-40188

HIGH CVSS 7.2 Oct 11, 2021

CVE-2021-40188 is an arbitrary file upload vulnerability in PHPFusion's admin panel File Manager that allows attackers to upload malicious PHP files with various extensions. This enables remote code e...

CVE-2023-53928

MEDIUM CVSS 5.4 Dec 17, 2025

PHPFusion 9.10.30 contains a stored cross-site scripting vulnerability in its file manager that allows attackers to upload malicious SVG files containing JavaScript. When users view these uploaded SVG...