Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/20 12:00 a.m.•3 views

CVE-2017-14618: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action...

4.8CVSS6.2AI score0.02432EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/07 12:00 a.m.•3 views

CVE-2017-7579: Improper Neutralization of Input During Web Page Generation

inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field...

6.1CVSS5.8AI score0.00668EPSS
SaveExploits0References2
Rows per page
Query Builder