CVE-2020-14960: PHP-Fusion

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter,

Affected products

• PHP-Fusion PHP-Fusion: version 9.03.50 only

Published 2020-06-22. Last modified 2026-06-17.