PT-2026-2927 · Ph7Software · Ph7-Social-Dating-Cms

CVE-2025-63644

·

Publicado

2026-01-14

·

Atualizado

2026-01-23

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1
Description A stored cross-site scripting (XSS) issue exists in the user profile Description field. This allows for the injection of malicious scripts that can be executed when other users view the affected profile.
Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the user profile Description field to remove potentially malicious code.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-63644
GHSA-657C-WXG6-JMQV

Produtos afetados

Ph7-Social-Dating-Cms