PHP Fusion

Products

ProductCVEsExploitedLatest
PHP Fusion2–Feb 5, 2026
PHPFusion2–Jan 30, 2026

Exploited and recent CVEs

  • CVE-2020-37152 Medium 5.1 PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS) 0.3%
  • CVE-2020-37137 Medium 6.1 PHP-Fusion 9.03.50 - 'panels.php' Eval Injection 0.6%
  • CVE-2020-36996 Medium 6.4 PHPFusion 9.03.50 - Persistent Cross-Site Scripting 0.3%
  • CVE-2023-53928 Medium 5.4 PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload 0.3%