Lucene search
Isdkrisna2D0AC48A-490D-4548-8D98-7447042DD1B5HistoryFeb 12, 2023 - 5:50 p.m.
Stored xss real name
2023-02-1217:50:11
isdkrisna
www.huntr.dev
7
stored xss
vulnerability
admin account
user addition
0.001 Low
EPSS
Percentile
23.5%
Description
In the admin account, there is a feature to add a user. In this feature, a vulnerability was found in the “Your Name” form.
Proof of Concept
1.go to https://roy.demo.phpmyfaq.de/admin/?action=user
2.add user with realname <script>alert('123')</script>
3.go to https://roy.demo.phpmyfaq.de/admin/?action=category
4.click button add new top-level category
POC
https://drive.google.com/file/d/1X4LdpwFcrbR7pA1C1-0wIU46S8tIWt0v/view?usp=share_link
Related
osv
osv
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
CVE-2023-1760
2023-03-31 02:15:06
cvelist
cvelist
CVE-2023-1760 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-03-31 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-04-07 08:12:29
nvd
nvd
CVE-2023-1760
2023-03-31 02:15:06
cve
cve
CVE-2023-1760
2023-03-31 02:15:06
prion
prion
Cross site scripting
2023-03-31 02:15:00
github
github
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00