CVE-2025-46729
phpDVDProfiler Cross-site Scripting vulnerability
Summary
phpDVDProfiler Cross-site Scripting vulnerability
Original description
The description as published by the source.
julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web openbugbounty.org
- web openbugbounty.org