PHPSUGAR

Products

ProductCVEsExploitedLatest
PHP Melody4–Feb 1, 2026

Exploited and recent CVEs

  • CVE-2021-47915 High 8.1 PHP Melody 3.0 SQL Injection Vulnerability via Edit Video Parameter 0.6%
  • CVE-2021-47914 Medium 6.4 PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter 0.3%
  • CVE-2021-47913 Medium 6.4 PHP Melody 3.0 Persistent Cross-Site Scripting via Video Editor 0.3%
  • CVE-2021-47912 Medium 6.4 PHP Melody 3.0 Non-Persistent Cross-Site Scripting via Multiple Parameters 0.3%