XSS in Julmud Phpdvdprofiler
CVE-2025-46729
julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (33.8th percentile) — read the EPSS interpretation.
Affected products
- Julmud Phpdvdprofiler — versions >= v_20230807, < v_20250511
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)