CVE-2021-44942: Glfusion

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist.

Affected products

• Glfusion Glfusion: version 1.7.9 only

Published 2021-12-14. Last modified 2026-06-17.