CVE-2025-61539

Published October 16th, 2025

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Cross site scripting (XSS) vulnerability in Ultimate PHP Board 2.2.7 via the u_name parameter in lostpassword.php.

bugdotexe/Vulnerability-ResearchUNAVAILABLE

This repository contains my independent vulnerability research, including CVEs, bug reports, and analysis of various software and platforms.

GitHub

PHP-Outburst/myUPB

Ultimate PHP Board is completely text based making it easy for anybody who has access to PHP can run a messageboard of their own without the need for MySQL.

GitHub