CVE-2025-63645

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 within its message system. The root cause is the application's failure to properly sanitize or apply context-aware encoding to the message content field. Consequently, unsanitized content ...