CVE-2025-63644
CVE-2025-63644
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field.
CVSS 5.4 · Medium · EPSS 0.3%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ph7software/ph7builder Packagist
- Versions
- 1.3.5
- 1.3.6
- 1.3.7
- 1.3.8
- 1.3.9
- 1.4.0
- 1.4.1
- 1.4.2
- 10.0.8
- 10.2.0
- 12.0.0
- 12.1.0
- 12.1.2
- 12.3.0
- 12.3.5
- 12.5.9
- 12.6.0
- 12.6.1
- 12.6.5
- 12.9.0
- 12.9.7
- 12.9.8
- 12.9.9
- 14.0.0
- 14.0.0-rc
- 14.0.0-rc2
- 14.0.0-rc3
- 14.3.0
- 14.3.4
- 14.3.4-rc
- 14.3.6
- 14.7.0
- 14.8.0
- 14.8.8
- 14.8.8-rc
- 14.8.8-rc2
- 14.8.9
- 14.9.0
- 14.9.0-rc
- 14.9.0-rc2
- 15.0.0
- 15.0.0-beta1
- 15.0.0-beta2
- 15.0.0-beta3
- 15.0.0-rc
- 15.1.0
- 15.1.0-beta
- 15.1.0-rc
- 15.1.0-rc2
- 15.1.6
- 15.1.7
- 15.1.8
- 15.2.0
- 15.3.0
- 15.3.0-rc.1
- 15.3.0-rc.2
- 15.3.0-rc.3
- 15.4.0
- 15.4.0-beta.1
- 15.4.0-beta.2
- 16.0.0
- 16.0.0-beta.1
- 16.0.0-beta.2
- 16.0.0-rc.1
- 16.0.0-rc.2
- 16.0.0-rc.3
- 16.0.2-beta.1
- 16.1.0
- 16.1.0-beta.1
- 16.1.1
- 16.2.0
- 16.2.0-beta.1
- 16.2.2
- 16.3.0
- 16.3.0-beta.1
- 16.3.2
- 16.5.0.beta.1
- 17.0.0-beta.3
- 17.0.1
- 17.1.0
- 17.1.2
- 17.1.8
- 17.1.8.beta.1
- 17.1.8.beta.2
- 17.2.0
- 17.2.0-beta.1
- 17.2.0-rc.1
- 17.2.0-rc.2
- 2.0.4
- 2.0.8
- 2.0.9
- 3.0.0
- 3.1.0
- 4.0.0
- 5.0.0
- 6.0.0
- 6.0.1
- 6.0.13
- 6.0.8
- 6.0.9
- 7.0.0
- 7.0.01
- 7.1.3
- 8.0.2
- 8.0.3
- 8.0.4
- 8.0.6
- v17.0.0
- v17.0.0-beta.2
- v17.9.0
- v17.9.1
- v17.9.1-beta.1
- Affected ranges
- ECOSYSTEM: ≤ 17.9.1
No fix published