Lucene search
+L

2545 matches found

Veracode
Veracode
•added 2023/06/13 11:10 a.m.•24 views

Cross-Site Scripting (XSS)

phpmyfaq/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of input sanitization in the getNews function of News.php, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

6.1CVSS6.5AI score0.00521EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
•added 2023/06/01 12:00 a.m.•61 views

phpMyFAQ < 3.1.14 Multiple XSS Vulnerabilities

phpMyFAQ is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.7CVSS6.7AI score0.00521EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/05/31 5:26 a.m.•21 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in the cleanUpContent function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

5.4CVSS6.5AI score0.00552EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
•added 2023/05/31 5:04 a.m.•32 views

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of content sanitization in the createFaqUrl function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...

5.4CVSS6.5AI score0.00541EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2023/05/31 3:30 a.m.•26 views

GHSA-974Q-4VVR-VG9C thorsten/phpmyfaq vulnerable to cross-site scripting

In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...

6CVSS6AI score0.00521EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/05/31 3:30 a.m.•26 views

thorsten/phpmyfaq vulnerable to cross-site scripting

In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...

6.1CVSS6.1AI score0.00521EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/05/31 1:15 a.m.•59 views

CVE-2023-2998

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.1CVSS5.8AI score0.00521EPSS
SaveExploits0References2
NVD
NVD
•added 2023/05/31 1:15 a.m.•32 views

CVE-2023-2999

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6AI score0.00483EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/05/31 1:15 a.m.•8 views

CVE-2023-2999

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6.6AI score0.00483EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/05/31 1:15 a.m.•8 views

CVE-2023-2998

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.1CVSS6.5AI score0.00521EPSS
SaveExploits0References3
Prion
Prion
•added 2023/05/31 1:15 a.m.•20 views

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

5.8CVSS6AI score0.00483EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•17 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.14. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

6.7CVSS6.2AI score0.00483EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/05/31 12:00 a.m.•57 views

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6CVSS6.2AI score0.00521EPSS
SaveExploits0References2
Mend
Mend
•added 2023/05/31 12:00 a.m.•2 views

CVE-2023-2998

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

7CVSS0.00521EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/05/31 12:00 a.m.•11 views

CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6AI score0.00483EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/05/31 12:00 a.m.•9 views

CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6CVSS5.9AI score0.00521EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/05/31 12:00 a.m.•39 views

CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.7CVSS6.2AI score0.00483EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•69 views

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.14, which stems from the presence of a stored cross-site scripting XSS vulnerability...

6.1CVSS5.9AI score0.00521EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/31 12:00 a.m.•2 views

CVE-2023-2998: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...

6.1CVSS5.8AI score0.00521EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/31 12:00 a.m.•2 views

PT-2023-22506

Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.14 Description The issue is related to a stored Cross-site Scripting XSS attack. This type of attack occurs when an application stores user input that contains malicious scripts, which are then executed ...

6.7CVSS0.00483EPSS
SaveExploits0References9
Rows per page
Query Builder