CVE-2021-44937: Glfusion

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied.

Affected products

• Glfusion Glfusion: version 1.7.9 only

Published 2021-12-14. Last modified 2026-06-17.