CVE-2017-15809: Improper Neutralization of Input During Web Page Generation

In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag...