PHP Fusion
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PHP Fusion | 2 | – | Feb 5, 2026 |
| PHPFusion | 2 | – | Jan 30, 2026 |
Exploited and recent CVEs
- CVE-2020-37152 PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) 0.3%
- CVE-2020-37137 PHP-Fusion 9.03.50 - 'panels.php' Eval Injection 0.6%
- CVE-2020-36996 PHPFusion 9.03.50 - Persistent Cross-Site Scripting 0.3%
- CVE-2023-53928 PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload 0.3%