Lucene search
K

1769 matches found

Veracode
Veracode
added 2023/06/13 11:10 a.m.18 views

Cross-Site Scripting (XSS)

phpmyfaq/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of input sanitization in the getNews function of News.php, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

6.1CVSS6.5AI score0.00388EPSS
Exploits0References2Affected Software2
OpenVAS
OpenVAS
added 2023/06/01 12:0 a.m.14 views

phpMyFAQ < 3.1.14 Multiple XSS Vulnerabilities

phpMyFAQ is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.7CVSS6.7AI score0.00388EPSS
Exploits0References2
Veracode
Veracode
added 2023/05/31 5:26 a.m.18 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in the cleanUpContent function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

5.4CVSS6.5AI score0.00211EPSS
Exploits0References3Affected Software2
Veracode
Veracode
added 2023/05/31 5:4 a.m.22 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of content sanitization in the createFaqUrl function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

5.4CVSS6.5AI score0.0052EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2023/05/31 3:30 a.m.14 views

GHSA-974Q-4VVR-VG9C thorsten/phpmyfaq vulnerable to cross-site scripting

In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...

6CVSS6AI score0.00388EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2023/05/31 3:30 a.m.15 views

thorsten/phpmyfaq vulnerable to cross-site scripting

In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...

6.1CVSS6.1AI score0.00388EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/05/31 1:15 a.m.1 views

CVE-2023-2999

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6.6AI score0.00362EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/05/31 1:15 a.m.1 views

CVE-2023-2998

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.1CVSS6.5AI score0.00388EPSS
Exploits0References3
NVD
NVD
added 2023/05/31 1:15 a.m.11 views

CVE-2023-2999

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6AI score0.00362EPSS
Exploits0References2
NVD
NVD
added 2023/05/31 1:15 a.m.11 views

CVE-2023-2998

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.1CVSS5.8AI score0.00388EPSS
Exploits0References2
Prion
Prion
added 2023/05/31 1:15 a.m.11 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

5.8CVSS6AI score0.00362EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/05/31 12:0 a.m.1 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.14. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.7CVSS6.2AI score0.00362EPSS
Exploits0References3
OSV
OSV
added 2023/05/31 12:0 a.m.10 views

CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6.8AI score0.00362EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/31 12:0 a.m.2 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.14, which stems from the presence of a stored cross-site scripting XSS vulnerability...

6.1CVSS5.9AI score0.00388EPSS
Exploits0References3
OSV
OSV
added 2023/05/31 12:0 a.m.10 views

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6CVSS6.3AI score0.00388EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/05/31 12:0 a.m.8 views

CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6AI score0.00362EPSS
Exploits0References2
CVE
CVE
added 2023/05/31 12:0 a.m.109 views

CVE-2023-2998

The CVE-2023-2998 entry concerns a Stored XSS in thorsten/phpMyFAQ before version 3.1.14. According to the documents, when admins create a FAQ News item, user-supplied content in the “text of the record” can inject scripts, leading to cross-site script execution. Affected component: phpMyFAQ’s ba...

6.1CVSS5.8AI score0.00388EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/31 12:0 a.m.16 views

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6CVSS6.2AI score0.00388EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/31 12:0 a.m.8 views

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6CVSS5.9AI score0.00388EPSS
Exploits0References2
CVE
CVE
added 2023/05/31 12:0 a.m.105 views

CVE-2023-2999

CVE-2023-2999 : A stored cross-site scripting (XSS) vulnerability affects phpMyFAQ

6.7CVSS5.9AI score0.00362EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder