CVE-2021-44942

MEDIUM

glFusion CMS 1.7.9 - Cross-Site Request Forgery in Blacklist Plugin

Title source: llm

Description

glFusion CMS 1.7.9 is affected by a Cross Site Request Forgery (CSRF) vulnerability in /public_html/admin/plugins/bad_behavior2/blacklist.php. Using the CSRF vulnerability to trick the administrator to click, an attacker can add a blacklist.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/glFusion/glfusion/issues/486

Scores

CVSS v3 4.3

EPSS 0.0035

EPSS Percentile 26.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-352

Status published

Products (1)

glfusion/glfusion 1.7.9

Published Dec 14, 2021

Tracked Since Feb 18, 2026