CVE-2017-7579

CVE-2017-7579 affects phpMyFAQ before 2.9.7, where the file inc/PMF/Faq.php is vulnerable to cross-site scripting through the question field. The root cause is an XSS flaw in the handling of that input, allowing injection of arbitrary web scripts/HTML. Documented impacts indicate an attacker coul...