Lucene search
K

57 matches found

NVD
NVD
added 2026/02/01 1:15 p.m.2 views

CVE-2021-47913

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

6.4CVSS0.00057EPSS
Exploits1References4
OSV
OSV
added 2026/02/01 1:15 p.m.1 views

CVE-2021-47913

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

5.4CVSS5.8AI score
Exploits0References4
CVE
CVE
added 2026/02/01 12:15 p.m.7 views

CVE-2021-47913

CVE-2021-47913 affects PHP Melody 3.0. A persistent cross-site scripting vulnerability exists in the video editor’s WYSIWYG—privileged users can inject malicious scripts, potentially enabling session hijacking and application manipulation. The connected sources describe the flaw consistently but ...

6.4CVSS5.9AI score0.00057EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/01 12:15 p.m.2 views

CVE-2021-47913 PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

6.4CVSS5.2AI score0.00057EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/01 12:15 p.m.31 views

CVE-2021-47913 PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

6.4CVSS0.00057EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/01 12:15 p.m.2 views

CVE-2021-47913

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

6.4CVSS5.9AI score0.00057EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/02/01 12:0 a.m.2 views

PHPSUGAR PHP Melody 跨站脚本漏洞

PHPSUGAR PHP Melody is a content management system developed by PHPSUGAR Corporation. The PHPSUGAR PHP Melody 3.0 version has a cross-site scripting vulnerability. This vulnerability stems from a persistent cross-site scripting vulnerability present in the video editor, which could allow privileg...

6.4CVSS5.6AI score0.00057EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/02/01 12:0 a.m.2 views

PT-2026-5558

PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijacking and application manipulation...

6.4CVSS5.9AI score0.00057EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 10:7 a.m.3 views

CVE-2019-20592

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 software. There is local SQL injection in the Story Video Editor Content Provider. The Samsung ID is SVE-2019-14062 July 2019...

7.8CVSS8AI score0.00037EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-11132

Malware in sbrugna...

7.8CVSS7.6AI score0.00037EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-39552

Malicious code in bioql PyPI...

3.3CVSS4.7AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:13 p.m.5 views

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

3.3CVSS6.6AI score0.00015EPSS
Exploits0References1
OSV
OSV
added 2022/09/09 3:15 p.m.0 views

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

3.3CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/09/09 3:15 p.m.10 views

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

3.3CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/09 3:15 p.m.1 views

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

3.3CVSS5.8AI score0.00015EPSS
Exploits0References2
Prion
Prion
added 2022/09/09 3:15 p.m.13 views

Authorization

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

1.7CVSS4AI score0.00015EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/09/09 2:40 p.m.43 views

CVE-2022-36852

Video Editor on Samsung mobile devices is affected by an Improper Authorization vulnerability. The issue allows a local attacker to access internal application data due to improper authorization. Affected versions are prior to SMR Sep-2022 Release 1. Mitigation: update to SMR Sep-2022 Release 1 o...

3.3CVSS3.9AI score0.00015EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/09 2:40 p.m.17 views

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

1.9CVSS4.1AI score0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.1 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2022 Release 1 version, which stems from Video Editor containing an improper...

3.3CVSS4.9AI score0.00015EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.2 views

PT-2022-23656 · Unknown · Video Editor

Name of the Vulnerable Software and Affected Versions: Video Editor versions prior to SMR Sep-2022 Release 1 Description: The issue allows a local attacker to access internal application data due to an improper authorization vulnerability. Recommendations: For versions prior to SMR Sep-2022 Relea...

3.3CVSS3.8AI score0.00015EPSS
Exploits0References3
Rows per page
Query Builder