CVE-2022-1086

DolphinPHP up to 1.5.0 is affected by a cross-site scripting vulnerability in the User Management Page. The issue stems from insufficient input/output data validation, allowing remote attacker exploitation and client-side JavaScript execution. Exploit information has been disclosed publicly. No r...

CVE-2022-37254

Vulnerability summary: CVE-2022-37254 affects DolphinPHP 1.5.1 with a Cross Site Scripting (XSS) flaw reachable via the backend: Background → System → system function → Configuration Management. The issue is documented across multiple sources (NVD, CVE lists) with a CVSSv3.1 base score of 5.4 (Me...