Lucene search
K

6 matches found

OSV
OSV
added 2026/02/01 1:15 p.m.2 views

CVE-2021-47914

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

5.4CVSS5.9AI score0.00031EPSS
Exploits1References4
NVD
NVD
added 2026/02/01 1:15 p.m.2 views

CVE-2021-47914

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS0.00031EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.27 views

CVE-2021-47914 PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS0.00031EPSS
Exploits1References4
CVE
CVE
added 2026/02/01 12:15 p.m.7 views

CVE-2021-47914

PHP Melody 3.0 is affected by a persistent cross-site scripting (XSS) vulnerability in the edit-video.php submitted parameter. The root cause is a flaw in handling the parameter, allowing an attacker to inject malicious script code that can be executed in a victim’s browser. Reported impacts incl...

6.4CVSS6AI score0.00031EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.1 views

CVE-2021-47914 PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS5.5AI score0.00031EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.3 views

PT-2026-5559

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijackin...

6.4CVSS6AI score0.00031EPSS
Exploits1References5
Rows per page
Query Builder