337 matches found
CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in getAllLinkTagsById of Tags.php due to missing conversion of the tag field to html entities which allows an attacker to inject and execute arbitrary javascript...
Cross-Site Scripting (XSS)
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in record.questions.php due to lack of sanitization of the user inputs of mail parameter which allows an attacker to inject and execute arbitrary javascript...
CVE-2023-2753 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
CVE-2023-2752
CVE-2023-2752 concerns a stored Cross-site Scripting (XSS) vulnerability in phpMyFAQ prior to 3.2.0-beta, due to insufficient input filtering/escaping in user-supplied data. The issue is evidenced across multiple sources (NVD/CNVD/OSV) referencing phpMyFAQ’s PHP-based FAQ application and the GitH...
CVE-2023-2753
CVE-2023-2753 affects phpMyFAQ prior to 3.2.0-beta, with stored XSS in the FAQ module. The root cause is insufficient input sanitization leading to script injection via stored content (e.g., answers). Impact reported is cross-site scripting; exact exploitation details are not elaborated beyond th...
CVE-2023-2753 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
CVE-2023-2752 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
CVE-2023-2752 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...
Cross Site Scripting in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...
GHSA-5MF7-P346-7RM8 Cross Site Scripting in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...
CVE-2023-2427 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2550
CVE-2023-2550 describes a stored Cross-site Scripting (XSS) vulnerability in the PHPMyFAQ project prior to version 3.1.13. The vulnerability arises from unfiltered user input stored and later displayed, with multiple sources explicitly stating XSS in thorsten/phpmyfaq before 3.1.13. Public adviso...
CVE-2023-2427
The CVE-2023-2427 vulnerability affects phpMyFAQ (Thorsten Rinne) prior to version 3.1.13 and is a reflected Cross-site Scripting (XSS) flaw. Attackers could leverage reflected input to execute script in a user’s browser, with potential cookie access as indicated by multiple sources. The only fix...
CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2429 Improper Access Control in thorsten/phpmyfaq
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2428 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...
CVE-2023-2429
The CVE-2023-2429 issue affects thorsten/phpmyfaq prior to 3.1.13, with an improper access control flaw related to user profile updates. The OpenVAS/OSV/GHSA entries describe that the vulnerability stems from insufficient validation of email addresses during user-profile changes, enabling an atta...