Unrated severityNVD Advisory· Published Nov 7, 2025· Updated Nov 7, 2025
HumHub is vulnerable to XSS through its Meta Search component
CVE-2025-64442
Description
HumHub is an Open Source Enterprise Social Network. Versions below 1.17.4 have a XSS vulnerability in the Meta-Search feature which allows malicious input to be executed in search previews. This issue is fixed in version 1.17.4.
Affected products
2- humhub/humhubv5Range: < 1.17.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/humhub/humhub/pull/7814mitrex_refsource_MISC
- github.com/humhub/humhub/releases/tag/v1.17.4mitrex_refsource_MISC
- github.com/humhub/humhub/security/advisories/GHSA-2hgp-33j2-93ccmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.