CVE-2021-44935: Glfusion

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

glFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html/comment.php. The attacker can complete the attack remotely without interaction.

Affected products

• Glfusion Glfusion: version 1.7.9 only

Published 2021-12-14. Last modified 2026-06-17.