5 matches found
CVE-2017-14618
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-14618: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...
CVE-2017-7579
inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field...
PT-2017-17814
Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 2.9.7 Description The issue is related to a Cross-Site Scripting XSS problem in the question field of the inc/PMF/Faq.php file. Recommendations For versions prior to 2.9.7, update to version 2.9.7 or later to resolve...