Lucene search
Veracode Vulnerability DatabaseVERACODE:40202HistoryApr 20, 2023 - 4:58 a.m.
Cross-site Scripting (XSS)
2023-04-2004:58:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
vulnerability
javascript injection
updatecategory parameter
improper sanitization
attacker
software
EPSS
0.001
Percentile
23.3%
thorsten/phpmyfaq is vulnerable to Cross-site Scripting (XSS). The vulnerability exists due to improper sanitization in the updatecategory parameter, which allows an attacker to inject and execute malicious JavaScript.
Related
cvelist
cvelist
CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-04-05 00:00:00
prion
prion
Cross site scripting
2023-04-05 17:15:00
github
github
cve
cve
CVE-2023-1879
2023-04-05 17:15:07
nvd
nvd
CVE-2023-1879
2023-04-05 17:15:07
osv
osv
CVE-2023-1879
2023-04-05 17:15:07
huntr
huntr
Stored XSS @ updatecategory
2023-03-08 20:19:28
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00