Lucene search
+L

12 matches found

OSV
OSV
•added 2026/02/01 1:15 p.m.•12 views

CVE-2021-47914

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

5.4CVSS5.9AI score0.00322EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/01 1:15 p.m.•15 views

CVE-2021-47914

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS0.00322EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/01 12:15 p.m.•9 views

CVE-2021-47915 PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows authenticated attackers to inject malicious SQL commands. Attackers can exploit the unvalidated 'vid' parameter to execute arbitrary database queries and potentially compromise the web...

8.6CVSS6.1AI score0.0056EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/02/01 12:15 p.m.•43 views

CVE-2021-47914 PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS0.00322EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/02/01 12:15 p.m.•8 views

CVE-2021-47914

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS6AI score0.00322EPSS
SaveExploits1References4Affected Software1
CVE
CVE
•added 2026/02/01 12:15 p.m.•25 views

CVE-2021-47914

PHP Melody 3.0 is affected by a persistent cross-site scripting (XSS) vulnerability in the edit-video.php submitted parameter. The root cause is a flaw in handling the parameter, allowing an attacker to inject malicious script code that can be executed in a victim’s browser. Reported impacts incl...

6.4CVSS6AI score0.00322EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/01 12:15 p.m.•10 views

CVE-2021-47914 PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS5.5AI score0.00322EPSS
SaveExploits1References4
EUVD
EUVD
•added 2026/02/01 12:15 p.m.•14 views

EUVD-2021-34757

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS6AI score0.00322EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/02/01 12:00 a.m.•17 views

PHPSUGAR PHP Melody 跨站脚本漏洞

PHPSUGAR PHP Melody is a content management system developed by PHPSUGAR. The PHPSUGAR PHP Melody 3.0 version has a cross-site scripting vulnerability. This vulnerability stems from the submitted parameter in the edit-video.php file, which has a persistent cross-site scripting vulnerability. This...

6.4CVSS5.7AI score0.00322EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/02/01 12:00 a.m.•16 views

PT-2026-5559

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS6AI score0.00322EPSS
SaveExploits1References5
Packet Storm
Packet Storm
•added 2021/10/26 12:00 a.m.•486 views

PHP Melody 3.0 Cross Site Scripting

Document Title: =============== PHP Melody v3.0 - submitted Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2292 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date:...

0.2AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2021/10/20 12:00 a.m.•181 views

PHP Melody v3.0 - (submitted) Persistent XSS Vulnerability

Document Title: =============== PHP Melody v3.0 - submitted Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2292 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date:...

7.4AI score
SaveExploits0
Rows per page
Query Builder