Medium severity6.4NVD Advisory· Published Feb 1, 2026· Updated Jun 17, 2026
CVE-2021-47914
CVE-2021-47914
Description
PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijacking, persistent phishing, and manipulation of application modules.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:phpsugar:php_melody:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpsugar:php_melody:3.0:*:*:*:*:*:*:*
- (no CPE)range: 3.0
Patches
Vulnerability mechanics
References
4- www.vulnerability-lab.com/get_content.phpnvdExploitThird Party Advisory
- www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/nvdVendor Advisory
- www.vulncheck.com/advisories/php-melody-persistent-xss-vulnerability-via-edit-video-parameternvdThird Party Advisory
- www.phpsugar.com/phpmelody.htmlnvdProduct
News mentions
0No linked articles in our index yet.