CVE-2017-15648: Phpsugar PHP Melody

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.

Affected products

• Phpsugar PHP Melody: up to and including 2.7.2

Published 2017-10-19. Last modified 2026-06-17.