CVE-2023-5316

Affected software: phpMyFAQ prior to 3.1.18 (GitHub repo thorsten/phpmyfaq). Vulnerability: Cross-site Scripting (XSS) via DOM manipulation. All concrete entries describe a DOM-based XSS vector impacting user input handling in versions before 3.1.18. Impact: Enables execution of arbitrary scripts...

CVE-2023-5317

CVE-2023-5317 is a stored Cross-site Scripting (XSS) vulnerability in the phpMyFAQ project (thorsten/phpmyfaq) prior to version 3.1.18. The issue affects the web-facing input handling that can lead to script execution when data is stored and later rendered. Multiple advisories corroborate this XS...

CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319

CVE-2023-5319 concerns a stored Cross-site Scripting (XSS) vulnerability in the PHPMyFAQ project prior to version 3.1.18. The affected software is phpMyFAQ (thorsten/phpmyfaq) and the underlying issue is stored input being reflected in user-visible pages without proper sanitization, enabling an a...

CVE-2023-5227 Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

CVE-2023-5227

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

CVE-2023-5227 Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

CVE-2023-5227

CVE-2023-5227 targets thorsten/phpmyfaq prior to version 3.1.8, enabling unrestricted upload of files with dangerous types in the image/file upload workflow. Connected data corroborate related issues across feeds, with some sources indicating a fix at 3.1.18 and others listing 3.1.8 as the affect...

phpMyFAQ Cross-Site Scripting Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

phpMyFAQ Cross-Site Scripting Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-5320: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5316: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5227: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...

phpMyFAQ Cross-Site Scripting Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

phpMyFAQ Code Issues Vulnerabilities

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A code issue vulnerability exists in versions of phpMyFAQ prior to 3.1.18, which stems from not restricting the types of files that can be uploaded...

CVE-2023-5317: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

phpMyFAQ Cross-Site Scripting Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...