CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0791

CVE-2023-0791 affects phpMyFAQ prior to 3.1.11 with a stored XSS vulnerability. Multiple connected sources (NVD, CNVD, GHSA, OSV, CNNVD, CVE listing) confirm a stored XSS in this version range. Remediation is to upgrade to 3.1.11 or later, as indicated by multiple references.

CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq

Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0789

CVE-2023-0789 affects thorsten/phpMyFAQ prior to 3.1.11. It is a reported command injection vulnerability in the web application. Public databases assign a high/critical severity: NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and full impact on confidenti...

CVE-2023-0788

CVE-2023-0788 affects phpMyFAQ before version 3.1.11 (thorsten/phpmyfaq). The vulnerability is a Code Injection in the application. Public records show a high-severity issue with CVSSv3.1: base score 9.8 (CRITICAL) per NVD, with network access, no user interaction, and high impact on confidential...

CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0788 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0788 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0787

CVE-2023-0787 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.11. The issue is a Cross-site Scripting (XSS) vulnerability originating from the application, with the vulnerability described as generic XSS in multiple sources (CVE entry, OSV, CNVD, GHSA). The root cause details are not el...

CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0794

CVE-2023-0794 is a Cross-site Scripting (XSS) vulnerability described as stored in the GitHub project thorsten/phpmyfaq, affecting versions prior to 3.1.11. The connected documents consistently identify this XSS issue across multiple feeds (NVD, Red Hat, OSV, GHSA, CNVD, etc.). They do not provid...

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...

thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-04316)

phpMyFAQ is a multilingual, fully database-driven FAQ system by Thorsten Rinne, a personal developer. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are...

CVE-2023-0314

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0310

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0313 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0313

CVE-2023-0313 is a stored XSS vulnerability affecting the phpMyFAQ project (thorsten/phpmyfaq) in versions prior to 3.1.10. The issue stems from stored script content in the FAQ data that can be rendered to users. Several connected sources (NVD, OSV, GHSA, CNVD, CNVD-like entries) consistently de...