VULNERABILITY INTELLIGENCE

CVE-2020-35687

CVSS score4.3 MEDIUM

EPSS probability1.38%

CISA KEVNot currently listed

Published2021-01-13

Last modified2026-06-17

Description

PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker on behalf of the logged in victim.