php-fusion
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 62 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 4, 2007 to present
62
Total CVEs
27
Critical+High
0
Exploited
22
Unpatched
Threat Assessment
Avg CVSS
6.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
22
Critical/High
Risk Level
56/100
medium
Severity Distribution
Critical
5High
22Medium
34Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
24
2
SQL Injection
21
3
Path Traversal
4
4
Malicious File Upload
3
5
CSRF
2
Most Affected Products
1. PHP-Fusion php-fusion62
2. PHP-Fusion Phpfusion13
3. Basti2web Book Panel2
4. Ausimods E-cart2
5. PHP-Fusion Members Cv Module2
Recent Vulnerabilities
See more →CVE-2020-37152
CVSS 6.1medium
PHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)
2/5/2026🔧 No Patch
CVE-2020-37137
CVSS 8.6high
PHP-Fusion 9.03.50 - 'panels.php' Eval Injection
2/5/2026🔧 No Patch
CVE-2023-53928
CVSS 5.1medium
PHPFusion 9.10.30 Stored Cross-Site Scripting via File Manager Upload
12/17/2025🔧 No Patch
CVE-2023-4480
CVSS 5.5medium
Arbitrary File Read in Fusion File Manager
9/5/2023🔧 No Patch
CVE-2023-2453
CVSS 8.8high
Local file Inclusion (LFI) in Forum Infusion via Directory Traversal
9/5/2023🔧 No Patch
CVE-2021-3172
CVSS 8.1high
2/17/2023
CVE-2022-3152
CVSS 9.6critical
Unverified Password Change in phpfusion/phpfusion
9/7/2022
CVE-2014-8597
CVSS 6.1medium
2/17/2022🔧 No Patch
CVE-2020-23754
CVSS 9.6critical
11/2/2021🔧 No Patch
CVE-2021-40188
CVSS 7.2high
10/11/2021🔧 No Patch
Monitor php-fusion in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.