Lucene search
Veracode Vulnerability DatabaseVERACODE:40073HistoryApr 07, 2023 - 8:12 a.m.
Cross-Site Scripting (XSS)
2023-04-0708:12:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
xss
phpmyfaq
userhelper.php
0.001 Low
EPSS
Percentile
23.5%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the user input of the display_name in getAllUserOptions function of UserHelper.php file, which allows an attacker to inject and execute malicious JavaScript in the victim’s browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 |
Related
osv
osv
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
CVE-2023-1760
2023-03-31 02:15:06
cvelist
cvelist
CVE-2023-1760 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-03-31 00:00:00
nvd
nvd
CVE-2023-1760
2023-03-31 02:15:06
huntr
huntr
Stored xss real name
2023-02-12 17:50:11
cve
cve
CVE-2023-1760
2023-03-31 02:15:06
prion
prion
Cross site scripting
2023-03-31 02:15:00
github
github
phpMyFAQ Stored Cross-site Scripting vulnerability
2023-03-31 03:30:31
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00