363 matches found
CVE-2023-5867: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2...
PT-2023-32386
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.2.2 Description The issue is related to Cross-site Scripting XSS - Stored, which means an attacker can inject malicious scripts into the application. Recommendations For versions prior to 3.2.2, update to...
CVE-2023-5864: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of url sanitization in instances.php which allow an attacker to pass a malicious URL...
Unrestricted File Upload
thorsten/phpmyfaq is vulnerable to Unrestricted File Upload. The vulnerability is due to the system allowing the upload of arbitrary files without validating the MIME type. An attacker can exploit this issue by uploading malicious files to the server, potentially leading to remote code execution...
Cross Site Scripting
thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to improper sanitization of data. This can be exploited by an attacker to inject malicious JavaScript into the web application...
CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5320
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5316
Affected software: phpMyFAQ prior to 3.1.18 (GitHub repo thorsten/phpmyfaq). Vulnerability: Cross-site Scripting (XSS) via DOM manipulation. All concrete entries describe a DOM-based XSS vector impacting user input handling in versions before 3.1.18. Impact: Enables execution of arbitrary scripts...
CVE-2023-5316 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5317 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5316
Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5317
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5317
CVE-2023-5317 is a stored Cross-site Scripting (XSS) vulnerability in the phpMyFAQ project (thorsten/phpmyfaq) prior to version 3.1.18. The issue affects the web-facing input handling that can lead to script execution when data is stored and later rendered. Multiple advisories corroborate this XS...
CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5319
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...
CVE-2023-5227
CVE-2023-5227 targets thorsten/phpmyfaq prior to version 3.1.8, enabling unrestricted upload of files with dangerous types in the image/file upload workflow. Connected data corroborate related issues across feeds, with some sources indicating a fix at 3.1.18 and others listing 3.1.8 as the affect...
CVE-2023-5227
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...