CVE-2023-5864 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...

CVE-2023-5864 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1...

CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2...

CVE-2023-5864

CVE-2023-5864 concerns a Cross-site Scripting (XSS) vulnerability in phpMyFAQ (Thorsten/phpMyFAQ). Affected software is phpMyFAQ versions prior to 3.2.1 (some sources reference 3.2.1/3.2.2 as thresholds). The issue is stored XSS via user-controllable input that is stored and later rendered to oth...

CVE-2023-5863

CVE-2023-5863 is a reflected XSS vulnerability in phpMyFAQ prior to 3.2.2. The issue arises from insufficient filtering/escaping in the action parameter of admin/index.php?action=, allowing an attacker to inject script via reflected input. Exploitation can enable arbitrary Web script execution or...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to a lack of url sanitization in instances.php which allow an attacker to pass a malicious URL...

Unrestricted File Upload

thorsten/phpmyfaq is vulnerable to Unrestricted File Upload. The vulnerability is due to the system allowing the upload of arbitrary files without validating the MIME type. An attacker can exploit this issue by uploading malicious files to the server, potentially leading to remote code execution...

Cross Site Scripting

thorsten/phpmyfaq is vulnerable to Cross Site Scripting. The vulnerability is due to improper sanitization of data. This can be exploited by an attacker to inject malicious JavaScript into the web application...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5320

CVE-2023-5320 is a DOM-based XSS in phpMyFAQ prior to version 3.1.18. The vulnerability affects the web interface’s client-side DOM handling, allowing a crafted input to execute arbitrary scripts in a victim’s browser. Exploitation requires user interaction (UI:R) and is scoped to the affected ap...

CVE-2023-5317 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5316 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5317

CVE-2023-5317 is a stored Cross-site Scripting (XSS) vulnerability in the phpMyFAQ project (thorsten/phpmyfaq) prior to version 3.1.18. The issue affects the web-facing input handling that can lead to script execution when data is stored and later rendered. Multiple advisories corroborate this XS...

CVE-2023-5316

Affected software: phpMyFAQ prior to 3.1.18 (GitHub repo thorsten/phpmyfaq). Vulnerability: Cross-site Scripting (XSS) via DOM manipulation. All concrete entries describe a DOM-based XSS vector impacting user input handling in versions before 3.1.18. Impact: Enables execution of arbitrary scripts...

CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319

CVE-2023-5319 concerns a stored Cross-site Scripting (XSS) vulnerability in the PHPMyFAQ project prior to version 3.1.18. The affected software is phpMyFAQ (thorsten/phpmyfaq) and the underlying issue is stored input being reflected in user-visible pages without proper sanitization, enabling an a...

CVE-2023-5227 Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8...