CVE-2025-46729: Julmud Phpdvdprofiler

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler software. Starting in v_20230807 and prior to v_20250511, cross-site scripting in the search function. v_20250511 contains a patch for the issue.

Affected products

• Julmud Phpdvdprofiler: from v_20230807, before v_20250511 (fixed in v_20250511)

Published 2025-05-12. Last modified 2026-06-17.