{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"17.9.1"}],"component":"ph7software/ph7builder","cve_ids":["CVE-2025-63644"],"ecosystem":"Packagist","epss":0.00293,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-657c-wxg6-jmqv","id":"tcs_01M5KEWN8CH0G12ZNP50MNNTMG","modified_at":"2026-02-03T03:11:10.676210Z","published_at":"2026-01-14T18:31:37Z","references":["https://osv.dev/vulnerability/GHSA-657c-wxg6-jmqv","https://nvd.nist.gov/vuln/detail/CVE-2025-63644","https://drive.google.com/drive/folders/1mYDvUTnlTPCGTB-7tHD3pmu_wHtlMVRP","https://github.com/pH7Software/pH7-Social-Dating-CMS","https://medium.com/@rudranshsinghrajpurohit/cve-2025-63644-stored-cross-site-scripting-xss-vulnerability-in-ph7-social-dating-cms-23ed0e7eb853"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-657c-wxg6-jmqv","url":"https://osv.dev/vulnerability/GHSA-657c-wxg6-jmqv"}],"summary":"pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability"}