Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/15 12:23 a.m.•19 views

CVE-2025-63644

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

5.4CVSS5.6AI score0.00293EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2026/01/14 6:31 p.m.•25 views

GHSA-657C-WXG6-JMQV pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

6.1CVSS5.5AI score0.00293EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•33 views

PT-2026-2927

Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1 Description A stored cross-site scripting XSS issue exists in the user profile Description field. This allows for the injection of malicious scripts that can be executed when other users view th...

6.1CVSS5.6AI score0.00293EPSS
SaveExploits1References9
attackerkb
attackerkb
•added 2026/01/14 12:00 a.m.•8 views

CVE-2025-63644

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

5.4CVSS5.6AI score0.00293EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•8 views

CVE-2025-63644: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...

5.4CVSS5.6AI score0.00293EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/13 12:30 a.m.•23 views

EUVD-2025-150400

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits1References3
NVD
NVD
•added 2025/11/12 10:15 p.m.•16 views

CVE-2025-63645

A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...

5.4CVSS0.00216EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/12 12:00 a.m.•16 views

PT-2025-46721

Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1 Description A stored cross-site scripting XSS issue exists in the application's message system. Unsanitized message content submitted by a user is stored by the server and displayed to other use...

5.4CVSS5.9AI score0.00216EPSS
SaveExploits1References7
Rows per page
Query Builder