Lucene search
Veracode Vulnerability DatabaseVERACODE:39364HistoryFeb 20, 2023 - 3:47 p.m.
Cross-site Scripting (XSS)
2023-02-2015:47:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
cross-site scripting
xss
thorsten/phpmyfaq
html entities
faq-proposal
admin account takeover
0.001 Low
EPSS
Percentile
23.5%
thorsten/phpmyfaq is vulnerable to Cross-site Scripting (XSS). The vulnerability exists due to the missing conversion for HTML entities in report.view.php, allowing an attacker to inject and execute malicious JavaScript through the FAQ-Proposal, which leads to an admin account takeover.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.10 | |
| phpmyfaq/phpmyfaq | le | 3.1.10 | |
| thorsten/phpmyfaq | le | 3.1.10 | |
| phpmyfaq/phpmyfaq | le | 3.1.10 |
Related
huntr
huntr
cvelist
cvelist
CVE-2023-0786 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
2023-02-12 00:00:00
cve
cve
CVE-2023-0786
2023-02-12 14:15:11
osv
osv
Cross-site Scripting in thorsten/phpmyfaq
2023-02-12 15:30:25
CVE-2023-0786
2023-02-12 14:15:11
prion
prion
Cross site scripting
2023-02-12 14:15:00
github
github
Cross-site Scripting in thorsten/phpmyfaq
2023-02-12 15:30:25
cnvd
cnvd
phpMyFAQ Cross-Site Scripting Vulnerability (CNVD-2023-09628)
2023-02-14 00:00:00
nvd
nvd
CVE-2023-0786
2023-02-12 14:15:11
openvas
openvas
phpMyFAQ < 3.1.11 Multiple Vulnerabilities
2023-02-13 00:00:00