Lucene search
Veracode Vulnerability DatabaseVERACODE:39017HistoryJan 26, 2023 - 5:17 a.m.
Cross-site Scripting (XSS)
2023-01-2605:17:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
phpmyfaq
cross-site scripting
xss
header.php
javascript
0.0005 Low
EPSS
Percentile
17.9%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the special characters before it output to the front end in header.php, which allows an attacker to inject and execute malicious JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.9 | |
| phpmyfaq/phpmyfaq | le | 3.1.9 | |
| thorsten/phpmyfaq | le | 3.1.9 | |
| phpmyfaq/phpmyfaq | le | 3.1.9 |
Related
nvd
nvd
CVE-2023-0309
2023-01-15 22:15:10
huntr
huntr
Blind Stored XSS in admin panel (open question page)
2022-12-17 14:35:21
cvelist
cvelist
CVE-2023-0309 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-01-15 00:00:00
cnvd
cnvd
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-04317)
2023-01-16 00:00:00
prion
prion
Cross site scripting
2023-01-15 22:15:00
github
github
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-01-16 00:30:24
osv
osv
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-01-16 00:30:24
CVE-2023-0309
2023-01-15 22:15:10
cve
cve
CVE-2023-0309
2023-01-15 22:15:10
openvas
openvas
phpMyFAQ < 3.1.10 Multiple Vulnerabilities
2023-01-16 00:00:00