CVE-2025-63644

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 . The flaw is located in the user profile Description field , where a lack of proper input neutralization allows for the injection of malicious scripts. These scripts can be executed in th...

CVE-2025-63645

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 within its message system. The root cause is the application's failure to properly sanitize or apply context-aware encoding to the message content field. Consequently, unsanitized content ...