Unrated severityNVD Advisory· Published Feb 1, 2026· Updated Mar 5, 2026
PHP Melody 3.0 Persistent XSS Vulnerability via Edit Video Parameter
CVE-2021-47914
Description
PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitted parameter that allows remote attackers to inject malicious script code. Attackers can exploit this vulnerability to execute arbitrary JavaScript, potentially leading to session hijacking, persistent phishing, and manipulation of application modules.
Affected products
2- Range: =3.0
- PHPSUGAR/PHP Melodyv5Range: 3.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/mitrepatch
- www.vulnerability-lab.com/get_content.phpmitreexploit
- www.vulncheck.com/advisories/php-melody-persistent-xss-vulnerability-via-edit-video-parametermitrethird-party-advisory
- www.phpsugar.com/phpmelody.htmlmitreproduct
News mentions
0No linked articles in our index yet.