CVE CVE-2021-47914

CVE-2021-47914

PHP

Severity: MEDIUM
CVSS: 6.4CVSS
Published: 2026-02-01
Last modified: 2026-02-11
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CWE: CWE-79

Description

PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijacking, persistent phishing, and manipulation of application modules.

References

https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/
https://www.phpsugar.com/phpmelody.html
https://www.vulncheck.com/advisories/php-melody-persistent-xss-vulnerability-via-edit-video-parameter
https://www.vulnerability-lab.com/get_content.php?id=2292

Summary

Description

References