Lucene search
Veracode Vulnerability DatabaseVERACODE:40233HistoryApr 20, 2023 - 4:10 p.m.
Cross-Site Scripting (XSS)
2023-04-2016:10:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
phpmyfaq
javascript
security vulnerability
EPSS
0.001
Percentile
33.2%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the user input before it output to the front end, allowing an attacker to inject and execute malicious JavaScript in the victim’s browser.
Related
cvelist
cvelist
CVE-2023-1884 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
2023-04-05 00:00:00
huntr
huntr
XSS @ Stop Words
2023-03-08 20:37:22
prion
prion
Cross site scripting
2023-04-05 17:15:00
osv
osv
thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter
2023-04-05 18:30:18
CVE-2023-1884
2023-04-05 17:15:07
github
github
nvd
nvd
CVE-2023-1884
2023-04-05 17:15:07
cve
cve
CVE-2023-1884
2023-04-05 17:15:07
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00