CVE-2021-44937

EUVD-2021-31735
glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupied.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
glfusionglfusion
1.7.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/glFusion/glfusion/issues/485
https://github.com/glFusion/glfusion/issues/485