VendorsGlobal Dating Softwarepremiumdatingscript4.2.7.7
Vulnerabilities

Global Dating Software premiumdatingscript 4.2.7.7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2021-41694
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
Published 2021-12-09 · Modified
9.8EPSS 0.013
CVE-2021-41695
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .
Published 2021-12-09 · Modified
9.8EPSS 0.012
CVE-2021-41696
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
Published 2021-12-09 · Modified
6.5EPSS 0.009
CVE-2021-41697
A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.
Published 2021-12-09 · Modified
6.1EPSS 0.007