CVE-2023-2999

CVE-2023-2999 : A stored cross-site scripting (XSS) vulnerability affects phpMyFAQ

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in getAllLinkTagsById of Tags.php due to missing conversion of the tag field to html entities which allows an attacker to inject and execute arbitrary javascript...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in record.questions.php due to lack of sanitization of the user inputs of mail parameter which allows an attacker to inject and execute arbitrary javascript...

CVE-2023-2753 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...

CVE-2023-2753 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...

CVE-2023-2752 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...

CVE-2023-2752 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta...

CVE-2023-2752

CVE-2023-2752 concerns a stored Cross-site Scripting (XSS) vulnerability in phpMyFAQ prior to 3.2.0-beta, due to insufficient input filtering/escaping in user-supplied data. The issue is evidenced across multiple sources (NVD/CNVD/OSV) referencing phpMyFAQ’s PHP-based FAQ application and the GitH...

CVE-2023-2753

CVE-2023-2753 affects phpMyFAQ prior to 3.2.0-beta, with stored XSS in the FAQ module. The root cause is insufficient input sanitization leading to script injection via stored content (e.g., answers). Impact reported is cross-site scripting; exact exploitation details are not elaborated beyond th...

Cross Site Scripting in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...

GHSA-5MF7-P346-7RM8 Cross Site Scripting in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to version 3.1.13...

CVE-2023-2427 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2427

The CVE-2023-2427 vulnerability affects phpMyFAQ (Thorsten Rinne) prior to version 3.1.13 and is a reflected Cross-site Scripting (XSS) flaw. Attackers could leverage reflected input to execute script in a user’s browser, with potential cookie access as indicated by multiple sources. The only fix...

CVE-2023-2550

CVE-2023-2550 describes a stored Cross-site Scripting (XSS) vulnerability in the PHPMyFAQ project prior to version 3.1.13. The vulnerability arises from unfiltered user input stored and later displayed, with multiple sources explicitly stating XSS in thorsten/phpmyfaq before 3.1.13. Public adviso...

CVE-2023-2428 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2428 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2429 Improper Access Control in thorsten/phpmyfaq

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13...

CVE-2023-2429 Improper Access Control in thorsten/phpmyfaq

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13...