Lucene search
Veracode Vulnerability DatabaseVERACODE:37728HistoryNov 01, 2022 - 4:26 a.m.
Cross-Site Scripting (XSS)
2022-11-0104:26:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
thorsten
phpmyfaq
cross-site scripting
vulnerability
injection
html
script
code
0.001 Low
EPSS
Percentile
30.2%
thorsten/phpmyfaq is vulnerable to cross-site scripting. The vulnerability exists in multiple functions due to missing quoting for search terms which allows an attacker to inject arbitrary html and script code into the web site.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.7 | |
| phpmyfaq/phpmyfaq | le | 3.1.7 | |
| thorsten/phpmyfaq | le | 3.1.7 | |
| phpmyfaq/phpmyfaq | le | 3.1.7 |
Related
cvelist
cvelist
CVE-2022-3766 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
2022-10-31 00:00:00
cve
cve
CVE-2022-3766
2022-10-31 11:15:10
prion
prion
Cross site scripting
2022-10-31 11:15:00
huntr
huntr
Reflect Cross Site Scripting when search
2022-10-20 08:50:12
osv
osv
CVE-2022-3766
2022-10-31 11:15:10
phpMyFAQ vulnerable to reflected Cross-site Scripting
2022-10-31 12:00:18
nvd
nvd
CVE-2022-3766
2022-10-31 11:15:10
github
github
phpMyFAQ vulnerable to reflected Cross-site Scripting
2022-10-31 12:00:18
openvas
openvas
phpMyFAQ < 3.1.8 Multiple Vulnerabilities
2022-11-03 00:00:00