What’s Vulnerable › Vulnerabilities

CVE-2017-10801

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-19 · updated 2026-06-17
• Weakness: CWE-79

Description

phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI.

Affected products

• Phpsocial: through 3.0.0

References

• https://phpsocial.com/page/changelog
• https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/
• https://phpsocial.com/page/changelog
• https://www.seekurity.com/blog/advisories/cross-sitescripting-vulnerability-in-phpsocial-aka-phpdolphin-social-network-script/

Get alerted when CVE-2017-10801 or the next vulnerability affects your stack