Lucene search
Veracode Vulnerability DatabaseVERACODE:40072HistoryApr 07, 2023 - 8:01 a.m.
Cross-Site Scripting (XSS)
2023-04-0708:01:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cross-site scripting
phpmyfaq
filter_unsafe_raw
malicious javascript
browser
0.001 Low
EPSS
Percentile
23.5%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the user inputs before it output to the front end due to the use of FILTER_UNSAFE_RAW filter, allowing an attacker to inject and execute malicious javascript on victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpmyfaq/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 |
Related
cve
cve
CVE-2023-1759
2023-03-31 02:15:06
prion
prion
Cross site scripting
2023-03-31 02:15:00
huntr
huntr
XSS @ records
2023-03-12 13:15:21
osv
osv
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
CVE-2023-1759
2023-03-31 02:15:06
cvelist
cvelist
CVE-2023-1759 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-03-31 00:00:00
nvd
nvd
CVE-2023-1759
2023-03-31 02:15:06
github
github
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00