Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/15 12:23 a.m.1 views

CVE-2025-63644

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

5.4CVSS5.7AI score0.00016EPSS
Exploits1References1
OSV
OSV
added 2026/01/14 6:31 p.m.2 views

GHSA-657C-WXG6-JMQV pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

6.1CVSS5.1AI score0.00016EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/14 12:0 a.m.1 views

CVE-2025-63644

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

5.4CVSS5AI score0.00016EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.2 views

PT-2026-2927

Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1 Description A stored cross-site scripting XSS issue exists in the user profile Description field. This allows for the injection of malicious scripts that can be executed when other users view th...

6.1CVSS6AI score0.00016EPSS
Exploits1References9
EUVD
EUVD
added 2025/11/13 12:30 a.m.1 views

EUVD-2025-150400

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS5.1AI score0.00026EPSS
Exploits1References3
NVD
NVD
added 2025/11/12 10:15 p.m.2 views

CVE-2025-63645

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS0.00026EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.2 views

PT-2025-46721

Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1 Description A stored cross-site scripting XSS issue exists in the application's message system. Unsanitized message content submitted by a user is stored by the server and displayed to other use...

5.4CVSS5.1AI score0.00026EPSS
Exploits1References7
Rows per page
Query Builder