Phpsugar / PHP Melody
9 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2021-47915 | PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter | HIGH | 8.6 | Feb 1, 2026 |
| CVE-2021-47914 | PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter | MEDIUM | 5.1 | Feb 1, 2026 |
| CVE-2021-47913 | PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor | MEDIUM | 5.1 | Feb 1, 2026 |
| CVE-2021-47912 | PHP Melody 3.0 Non-Persistent Cross-Site Scripting via Multiple Parameters | MEDIUM | 5.1 | Feb 1, 2026 |
| CVE-2018-5211 | PHP Melody version 2.7.1 suffer from SQL Injection Time-based attack on the page ajax.php with the parameter playlist. | CRITICAL | 9.8 | Jan 9, 2018 |
| CVE-2017-15081 | In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php. | CRITICAL | 9.8 | Oct 24, 2017 |
| CVE-2017-15648 | In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter. | MEDIUM | 6.1 | Oct 19, 2017 |
| CVE-2017-15579 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php. | CRITICAL | 9.8 | Oct 18, 2017 |
| CVE-2017-15578 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. | HIGH | 8.8 | Oct 18, 2017 |
Showing 1 to 9 of 9 CVEs