CVE-2022-1086: Dolphinphp Project Dolphinphp

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Dolphinphp Project Dolphinphp: up to and including 1.5.0

Published 2022-03-29. Last modified 2026-06-17.