VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Aug 18, 2025· Updated Jun 17, 2026

CVE-2025-55287

CVE-2025-55287

Description

Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI manipulation. This vulnerability is fixed in 4.4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Kreaweb/Genealogy
    cpe:2.3:a:kreaweb:genealogy:*:*:*:*:*:*:*:*
    Range: <4.4.0
  • MGeurts/genealogyllm-create2 versions
    <4.4.0+ 1 more
    • (no CPE)range: <4.4.0
    • (no CPE)range: < 4.4.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.