medium6.1
CVE-2025-63644
pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability
Impact
A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | ph7software/ph7builder | <= 17.9.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ph7builder | Ph7 Social Dating Builder | Version 17.9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://drive.google.com/drive/folders/1mYDvUTnlTPCGTB-7tHD3pmu_wHtlMVRP
- https://medium.com/@rudranshsinghrajpurohit/cve-2025-63644-stored-cross-site-scripting-xss-vulnerability-in-ph7-social-dating-cms-23ed0e7eb853
- https://github.com/advisories/GHSA-657c-wxg6-jmqv
- https://nvd.nist.gov/vuln/detail/CVE-2025-63644