Lucene search
Veracode Vulnerability DatabaseVERACODE:39021HistoryJan 26, 2023 - 8:34 a.m.
Cross-Site Scripting (XSS)
2023-01-2608:34:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
phpmyfaq
vulnerability
xss
attack
javascript
index.php
user input
0.0005 Low
EPSS
Percentile
18.0%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists due to improper sanitization of user inputs in index.php which allows an attacker to inject and execute arbitrary JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.9 | |
| phpmyfaq/phpmyfaq | le | 3.1.9 | |
| thorsten/phpmyfaq | le | 3.1.9 | |
| phpmyfaq/phpmyfaq | le | 3.1.9 |
Related
prion
prion
Cross site scripting
2023-01-15 22:15:00
osv
osv
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-01-16 00:30:25
CVE-2023-0308
2023-01-15 22:15:10
huntr
huntr
Stored XSS in admin panel (users page)
2022-12-19 16:03:24
cve
cve
CVE-2023-0308
2023-01-15 22:15:10
cnvd
cnvd
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-04318)
2023-01-16 00:00:00
nvd
nvd
CVE-2023-0308
2023-01-15 22:15:10
github
github
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-01-16 00:30:25
cvelist
cvelist
CVE-2023-0308 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-01-15 00:00:00
openvas
openvas
phpMyFAQ < 3.1.10 Multiple Vulnerabilities
2023-01-16 00:00:00