GHSA-JVJX-QQH7-6X6C thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting XSS because it fails to sanitize user input in the FAQ News link parameter. This has been fixed in 3.1.12...

PT-2023-17217

Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.12 Description The issue is related to stored Cross-site Scripting XSS due to the failure to sanitize user input in the FAQ News link parameter. This allows for the storage of malicious scripts that can ...