Skip to content
OpenAdvisories

Vendor

PHPSUGAR

4 known vulnerabilities.

Products

PHP Melody 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47914

    PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter

    PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, p…

    PHPSUGAR PHP Melody
  • Medium 6.4
    CVE-2021-47913

    PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor

    PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privileged users to inject malicious scripts. Attackers can exploit the WYSIWYG editor to execute persistent scripts, potentially leading to session hijack…

    PHPSUGAR PHP Melody
  • Medium 6.4
    CVE-2021-47912

    PHP Melody 3.0 Non-Persistent Cross-Site Scripting via Multiple Parameters

    PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, import, and user import files. Attackers can inject malicious scripts through unvalidated parameters to execute client-side attacks and potentially hij…

    PHPSUGAR PHP Melody