Cross-Site Scripting (XSS)

phpmyfaq is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input of the displayname in getAllUserOptions function of UserHelper.php file, which allows an attacker to inject and execute malicious JavaScript in the victim's browser...