Cross site scripting

2009-11-2019:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.

CPENameOperatorVersion
phpmyfaqle2.0.16
phpmyfaqeq0.60
phpmyfaqeq0.65
phpmyfaqeq0.70
phpmyfaqeq0.80
phpmyfaqeq0.80.97
phpmyfaqeq0.85
phpmyfaqeq0.86
phpmyfaqeq0.87
phpmyfaqeq0.90