CVE-2023-0786

CVE-2023-0786 describes a Cross-site Scripting (XSS) vulnerability in the PHP/MyFAQ project thorsten/phpmyfaq prior to version 3.1.11. The affected software is thorsten/phpmyfaq; the issue is identified as XSS. Remediation suggested by the connected records is to upgrade to 3.1.11 or later. Other...

CVE-2023-0791

CVE-2023-0791 affects phpMyFAQ prior to 3.1.11 with a stored XSS vulnerability. Multiple connected sources (NVD, CNVD, GHSA, OSV, CNNVD, CVE listing) confirm a stored XSS in this version range. Remediation is to upgrade to 3.1.11 or later, as indicated by multiple references.

CVE-2023-0789

CVE-2023-0789 affects thorsten/phpMyFAQ prior to 3.1.11. It is a reported command injection vulnerability in the web application. Public databases assign a high/critical severity: NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network access, no user interaction, and full impact on confidenti...

CVE-2023-0790

CVE-2023-0790 affects the PHPMyFAQ project, specifically versions prior to 3.1.11. The vulnerability is described as an uncaught exception in the GitHub repository thorsten/phpmyfaq. The available connected sources corroborate the issue and identify 3.1.11 as the fixed version. Impact details in ...

CVE-2023-0788

CVE-2023-0788 affects phpMyFAQ before version 3.1.11 (thorsten/phpmyfaq). The vulnerability is a Code Injection in the application. Public records show a high-severity issue with CVSSv3.1: base score 9.8 (CRITICAL) per NVD, with network access, no user interaction, and high impact on confidential...

CVE-2023-0788 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0788 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0792 Code Injection in thorsten/phpmyfaq

Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0787 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0787 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

Cross-site Scripting XSS - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11...

CVE-2023-0794

CVE-2023-0794 is a Cross-site Scripting (XSS) vulnerability described as stored in the GitHub project thorsten/phpmyfaq, affecting versions prior to 3.1.11. The connected documents consistently identify this XSS issue across multiple feeds (NVD, Red Hat, OSV, GHSA, CNVD, etc.). They do not provid...

Cross-site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to missing checks on redirect values in index.php, allowing an attacker to inject and execute malicious JavaScript...

Cross-Site Scripting (XSS)

thorsten/phpmyfaq is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper user input sanitization in record.comments.php which allows an attacker to inject and execute arbitrary scripts...

thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-04316)

phpMyFAQ is a multilingual, fully database-driven FAQ system by Thorsten Rinne, a personal developer. phpMyFAQ versions prior to 3.1.10 are vulnerable to a cross-site scripting vulnerability that stems from the presence of stored cross-site scripting XSS. No detailed vulnerability details are...

CVE-2023-0314

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0310

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

PT-2023-16165 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...