What is GHSA-657c-wxg6-jmqv?

GHSA-657c-wxg6-jmqv is a security advisory published by GitHub Security Advisories with Medium severity. pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability

Which CVE IDs does GHSA-657c-wxg6-jmqv cover?

GHSA-657c-wxg6-jmqv covers the following CVE IDs: CVE-2025-63644. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-657c-wxg6-jmqv?

GHSA-657c-wxg6-jmqv has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-657c-wxg6-jmqv?

GHSA-657c-wxg6-jmqv affects 1 product, including: composer/ph7software/ph7builder:\u003c= 17.9.1.

GHSA-657c-wxg6-jmqvMediumCVSS 6.1

pH7-Social-Dating-CMS affected by a stored cross-site scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

January 14, 2026

Last Modified

January 22, 2026

🔗 CVE IDs covered (1)

CVE-2025-63644 →

📋 Description

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field.

🎯 Affected products1

composer/ph7software/ph7builder:<= 17.9.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-63644
https://drive.google.com/drive/folders/1mYDvUTnlTPCGTB-7tHD3pmu_wHtlMVRP
https://medium.com/@rudranshsinghrajpurohit/cve-2025-63644-stored-cross-site-scripting-xss-vulnerability-in-ph7-social-dating-cms-23ed0e7eb853
https://github.com/advisories/GHSA-657c-wxg6-jmqv