3 matches found
CVE-2017-14619
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...
PT-2017-13585
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Title of your FAQ field in the Configuration Module. Recommendations For versions prior to...
CVE-2017-14619: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module...