PatchTheCVEphp melody vulnerabilities and fixes
Recent CVEs affecting php melody, with upgrade or downgrade steps. 4 tracked.
Also searched as: phpmelody.
php melody has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-02-01. Highest priority: CVE-2021-47915 (score 45/100).
- CVE-2021-47915 HIGH 8.1 DOWNGRADE PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows auth
- CVE-2021-47914 MEDIUM 6.4 DOWNGRADE PHP Melody version 3.0 contains a persistent cross-site scripting vulnerability in the edit-video.php submitte
- CVE-2021-47913 MEDIUM 6.4 DOWNGRADE PHP Melody 3.0 contains a persistent cross-site scripting vulnerability in the video editor that allows privil
- CVE-2021-47912 MEDIUM 6.4 DOWNGRADE PHP Melody version 3.0 contains multiple non-persistent cross-site scripting vulnerabilities in categories, im
FAQ
How do I fix php melody vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php melody being exploited right now?
None of the tracked php melody CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php melody CVE should I patch first?
CVE-2021-47915 currently ranks highest (45/100): PHP Melody version 3.0 contains a remote SQL injection vulnerability in the video edit module that allows auth.