Back to Database
Status published
High
CVE-2025-55287
Genealogy has a stored XSS vulnerability
Vulnerability Description
Genealogy is a family tree PHP application. Prior to 4.4.0, Authenticated Stored Cross-Site Scripting (XSS) vulnerability was identified in the Genealogy application. Authenticated attackers could run arbitrary JavaScript in another user’s session, leading to session hijacking, data theft, and UI manipulation. This vulnerability is fixed in 4.4.0.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55287
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
MGeurts
View all reports →Affected Software
genealogy
Vulnerable Versions:
< 4.4.0
Timeline
Official Publish:
August 18th, 2025
Last Modified:
August 18th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H