CVE-2023-1762 Improper Privilege Management in thorsten/phpmyfaq

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1759 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1760 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1753 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1761 Cross-site Scripting in thorsten/phpmyfaq

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1753 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1761 Cross-site Scripting in thorsten/phpmyfaq

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1759

CVE-2023-1759 is a stored cross-site scripting (XSS) vulnerability affecting phpMyFAQ versions prior to 3.1.12, reported across multiple feeds. The issue arises from storing user-supplied input without proper validation, enabling injection of script code in the affected application. The connected...

CVE-2023-1761

CVE-2023-1761 concerns a Cross-site Scripting (XSS) vulnerability in the GitHub repository for thorsten/phpMyFAQ, affecting versions prior to 3.1.12 . The vulnerability exists in the code path used to render user-controllable content, enabling an attacker to inject script in affected configuratio...

CVE-2023-1754

CVE-2023-1754 describes an improper neutralization of input during web page generation in the GitHub repository thorsten/phpmyfaq prior to 3.1.12, identified as a cross-site scripting risk in multiple sources. The vulnerability affects phpMyFAQ before 3.1.12 and is rooted in insufficient input ha...

CVE-2023-1762

The CVE-2023-1762 issue affects phpMyFAQ (thorsten/phpmyfaq) and stems from improper privilege management. Prior to version 3.1.12, any user who can add a new user could grant themselves super admin rights, enabling privilege escalation. Affected component: user/privilege handling within the appl...

CVE-2023-1754 Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

PT-2023-17215 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue is related to Cross-site Scripting XSS - Generic. It affects the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 or...

PT-2023-17213 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.12 Description: The issue concerns weak password requirements in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.12, update to version 3.1.12 or later to resolve the...

CVE-2023-1755

CVE-2023-1755 : A cross-site scripting (XSS) vulnerability exists in the thorsten/phpmyfaq GitHub repository, affecting versions prior to 3.1.12. The issue is described across multiple sources (NVD, OSV, GHSA, CNNVD, PT-Security) as a generic XSS in phpMyFAQ before 3.1.12. The remediation stated ...

CVE-2023-1753

CVE-2023-1753 covers weak password requirements in the GitHub repository for thorsten/phpMyFAQ before version 3.1.12. Multiple connected sources confirm this vulnerability class and its affected scope: phpMyFAQ prior to 3.1.12, stemming from weak password policies, with advisories and CVE records...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in instances.php due to missing sanitization to escape newly added values which allows an attacker to inject and execute JavaScript...

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the missing conversion for HTML entities in Faq.php, allowing an attacker to inject and execute malicious JavaScript...

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the missing conversion for HTML entities in report.view.php, allowing an attacker to inject and execute malicious JavaScript through the FAQ-Proposal, which leads to an admin account takeover...

CVE-2023-0880 Misinterpretation of Input in thorsten/phpmyfaq

Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11...