← Back

Premiumdatingscript

premiumdatingscript

Vendor: Globaldatingsoftware • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41697
1Globaldatingsoftware
1Premiumdatingscript
Jun 17, 2026
Dec 9, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.
CVE-2021-41696
1Globaldatingsoftware
1Premiumdatingscript
Jun 17, 2026
Dec 9, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
CVE-2021-41695
1Globaldatingsoftware
1Premiumdatingscript
Jun 17, 2026
Dec 9, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .
CVE-2021-41694
1Globaldatingsoftware
1Premiumdatingscript
Jun 17, 2026
Dec 9, 2021
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.