CVE-2023-0314: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

PT-2023-16164 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0312 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0313 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0310: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0309

The CVE-2023-0309 entry corresponds to a stored Cross-site Scripting (XSS) vulnerability in phpMyFAQ prior to version 3.1.10. Affected software is phpMyFAQ (thorsten/phpmyfaq) and the issue originates from a stored XSS vector in input processed by the application. The vulnerability is described c...

CVE-2023-0306

The CVE-2023-0306 entry concerns the PHPMyFAQ project (thorsten/phpmyfaq) with a Stored Cross-site Scripting (XSS) vulnerability present in versions prior to 3.1.10. The available connected documents consistently describe a Stored XSS flaw in this software, originating from un Sanitized input per...

CVE-2023-0313

CVE-2023-0313 is a stored XSS vulnerability affecting the phpMyFAQ project (thorsten/phpmyfaq) in versions prior to 3.1.10. The issue stems from stored script content in the FAQ data that can be rendered to users. Several connected sources (NVD, OSV, GHSA, CNVD, CNVD-like entries) consistently de...

CVE-2023-0308

The CVE-2023-0308 entry corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the PHP FAQ project phpMyFAQ, affecting the Thorsten/phpmyfaq repository when running versions prior to 3.1.10. Publicly documented references (NVD entry and related advisories) consistently describe the v...

CVE-2023-0311

CVE-2023-0311 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10 due to an improper authentication/authorization issue. The vulnerability is documented with a CVSSv3.1 base score of 9.8 (Network attack, no user interaction, high impact on confidentiality, integrity, and availability). T...

CVE-2023-0314

CVE-2023-0314 describes a reflected Cross-site Scripting (XSS) vulnerability in phpMyFAQ. The affected software is the phpMyFAQ application, with vulnerable versions prior to 3.1.10 (i.e., 3.1.9 and earlier). The description indicates the issue is reflected XSS originating from input processed by...

CVE-2023-0312

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0306: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0313: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0309: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0307 Weak Password Requirements in thorsten/phpmyfaq

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0313 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

CVE-2023-0307

CVE-2023-0307 affects the PHP-based web app phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. The vulnerability is due to Weak Password Requirements in the repository, allowing weaknesses in authentication policy that can compromise account security. The available public records indicate a hi...

CVE-2023-0310

CVE-2023-0310 is a Stored XSS in phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10. Documented across multiple feeds (NVD entry, GHSA/GitHub advisory, OSV, CVE List) consistently state an XSS vulnerability in the repository before 3.1.10. The root cause is a stored XSS issue in the application...