Lucene search
Veracode Vulnerability DatabaseVERACODE:38440HistoryDec 13, 2022 - 1:45 a.m.
Cross-Site Scripting (XSS)
2022-12-1301:45:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
phpmyfaq
cross-site scripting
vulnerability
html entities
javascript
attack
0.001 Low
EPSS
Percentile
25.4%
phpmyfaq is vulnerable to cross-site scripting. The vulnerability is due to index.php missing safe conversion to HTML entities which allows an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.8 | |
| phpmyfaq/phpmyfaq | le | 3.1.8 | |
| thorsten/phpmyfaq | le | 3.1.8 | |
| phpmyfaq/phpmyfaq | le | 3.1.8 |
Related
osv
osv
phpMyFAQ vulnerable to Cross-site Scripting
2022-12-11 15:30:45
CVE-2022-4407
2022-12-11 15:15:10
github
github
phpMyFAQ vulnerable to Cross-site Scripting
2022-12-11 15:30:45
nvd
nvd
CVE-2022-4407
2022-12-11 15:15:10
cvelist
cvelist
CVE-2022-4407 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
2022-12-11 00:00:00
prion
prion
Cross site scripting
2022-12-11 15:15:00
huntr
huntr
Reflect Cross Site Scripting
2022-11-26 14:30:28
cve
cve
CVE-2022-4407
2022-12-11 15:15:10
openvas
openvas
phpMyFAQ < 3.1.9 Multiple Vulnerabilities
2022-12-12 00:00:00