CVE-2020-35687

4.3 mediumEPSS 1.4%

Medium (4.3) in php-fusion phpfusion. EPSS 1.4% chance of exploitation in the next 30 days.

PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

php-fusion:phpfusion

References

https://github.com/PHPFusion/PHPFusion/issues/2347
https://www.exploit-db.com/exploits/49426
https://github.com/PHPFusion/PHPFusion/issues/2347
https://www.exploit-db.com/exploits/49426

Check your stack JSON