Lucene search
Veracode Vulnerability DatabaseVERACODE:40203HistoryApr 20, 2023 - 5:35 a.m.
Stored Cross-site Scripting (XSS)
2023-04-2005:35:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
vulnerability
thorsten
phpmyfaq
stored cross-site scripting
adminlog
stat.adminlog.php
improper sanitization
malicious javascript
software
0.001 Low
EPSS
Percentile
23.5%
thorsten/phpmyfaq is vulnerable to Stored Cross-site Scripting (XSS). The vulnerability exists due to the improper sanitization in the adminlog of the stat.adminlog.php, which allows an attacker to inject and execute malicious JavaScript through the $text attribute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 |
Related
github
github
osv
osv
CVE-2023-1878
2023-04-05 17:15:07
prion
prion
Cross site scripting
2023-04-05 17:15:00
cve
cve
CVE-2023-1878
2023-04-05 17:15:07
cvelist
cvelist
CVE-2023-1878 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-04-05 00:00:00
nvd
nvd
CVE-2023-1878
2023-04-05 17:15:07
huntr
huntr
Stored XSS in the adminlog functionality.
2023-02-16 01:37:04
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00