Lucene search
TsarsecurityECE5F051-674E-4919-B998-594714910F9EHistoryFeb 17, 2023 - 1:51 a.m.
Reflected XSS in send2friend.php
2023-02-1701:51:24
tsarsecurity
www.huntr.dev
15
reflected xss
parameter sanitization
bug bounty
github
security issue
code fix
0.001 Low
EPSS
Percentile
44.2%
Description
There is a reflected XSS in send2friend because the ‘artlang’ parameter is not sanitized.
Proof of Concept
visit http://phpmyfaq.local/?action=send2friend&artlang=aaaa"%3E%3Cscript%3Ealert(1);%3C/script%3E
Fix
sanitize the ‘$faqLanguage’ variable in https://github.com/thorsten/phpMyFAQ/blob/main/phpmyfaq/send2friend.php#L70
Related
nvd
nvd
CVE-2023-1880
2023-04-05 17:15:07
nuclei
nuclei
Phpmyfaq v3.1.11 - Cross-Site Scripting
2023-10-17 07:20:28
osv
osv
CVE-2023-1880
2023-04-05 17:15:07
cvelist
cvelist
CVE-2023-1880 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
2023-04-05 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-04-20 17:53:11
prion
prion
Cross site scripting
2023-04-05 17:15:00
github
github
cve
cve
CVE-2023-1880
2023-04-05 17:15:07
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00