CVE-2021-45843

glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting XSS vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response...

Cross site scripting

glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting XSS vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response...

CVE-2021-44935

CVE-2021-44935 affects glFusion CMS v1.7.9. The vulnerability is an access control error in /public_html/comment.php that enables an arbitrary user impersonation attack, with remote, no-interaction exploitation reported by the initial sources. The available documents do not provide a remediation ...