Lucene search
Veracode Vulnerability DatabaseVERACODE:40241HistoryApr 20, 2023 - 5:53 p.m.
Cross-Site Scripting (XSS)
2023-04-2017:53:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
cross-site scripting
phpmyfaq
vulnerable
javascript
browser
EPSS
0.001
Percentile
48.6%
phpmyfaq is vulnerable to Cross-Site Scripting (XSS) attacks. The library does not properly escape the user input in the artlang parameter of send2friend.php before it output to the front end, allowing an attacker to inject and execute malicious JavaScript in the victim’s browser.
Related
huntr
huntr
Reflected XSS in send2friend.php
2023-02-17 01:51:24
nvd
nvd
CVE-2023-1880
2023-04-05 17:15:07
github
github
prion
prion
Cross site scripting
2023-04-05 17:15:00
osv
osv
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter
2023-04-05 18:30:18
CVE-2023-1880
2023-04-05 17:15:07
cve
cve
CVE-2023-1880
2023-04-05 17:15:07
nuclei
nuclei
Phpmyfaq v3.1.11 - Cross-Site Scripting
2023-10-17 07:20:28
cvelist
cvelist
CVE-2023-1880 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
2023-04-05 00:00:00
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00