337 matches found
CVE-2023-5227 Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...
phpMyFAQ Cross-Site Scripting Vulnerability
phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
PT-2023-31952 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.8 Description: The issue is related to the unrestricted upload of files with dangerous types in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.8, update to version...
PT-2023-32036 · Thorsten · Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.18 Description: The issue is related to Cross-site Scripting XSS - DOM, which allows an attacker to execute malicious scripts in the browser of a user. This can lead to unauthorized access to sensitive...
PT-2023-32037 · Unknown · Thorsten/Phpmyfaq
Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.18 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.18, update to version 3.1.18 ...
CVE-2023-4007
CVE-2023-4007 is a stored XSS vulnerability in phpMyFAQ. Affected software: phpMyFAQ prior to version 3.1.16 (Thorsten Rinne’s project). The root cause: stored input may be injected, leading to cross-site script execution. Impact indicators in public documents show high confidentiality/integrity ...
CVE-2023-4007 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16...
CVE-2023-3469 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2...
CVE-2023-3469
The CVE-2023-3469 entry concerns phpMyFAQ (thorsten/phpmyfaq) prior to 3.2.0-beta.2, which is vulnerable to a reflected cross-site scripting (XSS) flaw when restoring a backup. The issue arises from how exception messages may include unencoded parts of the crafted backup file, allowing JavaScript...
CVE-2023-3469 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2...
CVE-2023-3469 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in the cleanUpContent function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of content sanitization in the createFaqUrl function, which allows an attacker to inject and execute arbitrary JavaScript into the browser...
thorsten/phpmyfaq vulnerable to cross-site scripting
In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...
GHSA-974Q-4VVR-VG9C thorsten/phpmyfaq vulnerable to cross-site scripting
In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section...
CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
CVE-2023-2998
The CVE-2023-2998 entry concerns a Stored XSS in thorsten/phpMyFAQ before version 3.1.14. According to the documents, when admins create a FAQ News item, user-supplied content in the “text of the record” can inject scripts, leading to cross-site script execution. Affected component: phpMyFAQ’s ba...