Lucene search
Veracode Vulnerability DatabaseVERACODE:40231HistoryApr 20, 2023 - 3:53 p.m.
Stored Cross-Site Scripting (XSS)
2023-04-2015:53:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
phpmyfaq
vulnerability
stored cross-site scripting
javascript
sanitization
browser
injection
0.001 Low
EPSS
Percentile
23.5%
phpmyfaq is vulnerable to Stored Cross-Site Scripting (XSS) attacks. The vulnerability is due to a lack of sanitization when adding a new faq news item which allows an attacker to inject and execute JavaScript in the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 | |
| phpmyfaq/phpmyfaq | le | 3.1.11 |
Related
prion
prion
Cross site scripting
2023-04-05 16:15:00
nvd
nvd
CVE-2023-1757
2023-04-05 16:15:07
cvelist
cvelist
CVE-2023-1757 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-04-05 00:00:00
osv
osv
CVE-2023-1757
2023-04-05 16:15:07
cve
cve
CVE-2023-1757
2023-04-05 16:15:07
github
github
huntr
huntr
XSS in hyperlink when create FAQ News
2023-02-12 20:21:44
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00