CVE-2025-51965

OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting (XSS) via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface.
CVSS

No CVSS.

Configurations

No configuration.

History

14 Aug 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-14 20:15

Updated : 2025-08-15 17:15


NVD link : CVE-2025-51965

Mitre link : CVE-2025-51965


JSON object : View

Products Affected

No product.

CWE

No CWE.