CVE-2023-0306 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpmyfaq -- multiple vulnerabilities

phpmyfaq developers report: phpMyFAQ does not implement sufficient checks to avoid a stored XSS in "Add new question" phpMyFAQ does not implement sufficient checks to avoid a stored XSS in admin user page phpMyFAQ does not implement sufficient checks to avoid a stored XSS in FAQ comments phpMyFAQ...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0309

The CVE-2023-0309 entry corresponds to a stored Cross-site Scripting (XSS) vulnerability in phpMyFAQ prior to version 3.1.10. Affected software is phpMyFAQ (thorsten/phpmyfaq) and the issue originates from a stored XSS vector in input processed by the application. The vulnerability is described c...

CVE-2023-0306

The CVE-2023-0306 entry concerns the PHPMyFAQ project (thorsten/phpmyfaq) with a Stored Cross-site Scripting (XSS) vulnerability present in versions prior to 3.1.10. The available connected documents consistently describe a Stored XSS flaw in this software, originating from un Sanitized input per...

CVE-2023-0313

CVE-2023-0313 is a stored XSS vulnerability affecting the phpMyFAQ project (thorsten/phpmyfaq) in versions prior to 3.1.10. The issue stems from stored script content in the FAQ data that can be rendered to users. Several connected sources (NVD, OSV, GHSA, CNVD, CNVD-like entries) consistently de...

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site scripting vulnerability exists in versions prior to phpMyFAQ 3.1.10, which stems from the presence of reflected cross-site scripting XSS. No details of the vulnerability are provided at this time...

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system by the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.10, which stems from the presence of weak passwords...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are currently available...

PT-2023-16162 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue concerns weak password requirements in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.10, update to version 3.1.10 or later to resolve the...

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0314 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0309 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

PT-2023-16166 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue concerns improper authentication in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.10, update to version 3.1.10 or later to resolve the iss...

CVE-2023-0310

CVE-2023-0310 is a Stored XSS in phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. Documented across multiple feeds (NVD entry, GHSA/GitHub advisory, OSV, CVE List) consistently state an XSS vulnerability in the repository before 3.1.10. The root cause is a stored XSS issue in the application...

CVE-2023-0307

CVE-2023-0307 affects the PHP-based web app phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. The vulnerability is due to Weak Password Requirements in the repository, allowing weaknesses in authentication policy that can compromise account security. The available public records indicate a hi...

CVE-2023-0314

CVE-2023-0314 describes a reflected Cross-site Scripting (XSS) vulnerability in phpMyFAQ. The affected software is the phpMyFAQ application, with vulnerable versions prior to 3.1.10 (i.e., 3.1.9 and earlier). The description indicates the issue is reflected XSS originating from input processed by...