Lucene search
Veracode Vulnerability DatabaseVERACODE:40312HistoryApr 27, 2023 - 11:22 a.m.
Cross-site Scripting (XSS)
2023-04-2711:22:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
xss
vulnerability
thorsten/phpmyfaq
user.php
javascript
injection
0.001 Low
EPSS
Percentile
34.7%
thorsten/phpmyfaq is vulnerable to Cross-site Scripting (XSS). The vulnerability exists in user.php because the username parameter is not properly sanitized which allows an attacker to inject and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| thorsten/phpmyfaq | le | 3.1.11 | |
| thorsten/phpmyfaq | le | 3.1.11 |
Related
cvelist
cvelist
CVE-2023-1875 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-04-22 00:00:00
nvd
nvd
CVE-2023-1875
2023-04-22 18:15:07
prion
prion
Cross site scripting
2023-04-22 18:15:00
github
github
Cross-site Scripting in thorsten/phpmyfaq
2023-04-22 18:30:28
osv
osv
Cross-site Scripting in thorsten/phpmyfaq
2023-04-22 18:30:28
CVE-2023-1875
2023-04-22 18:15:07
huntr
huntr
stored XSS Protection bypass by changing the User Profile Name
2023-03-10 08:42:50
cve
cve
CVE-2023-1875
2023-04-22 18:15:07
openvas
openvas
phpMyFAQ < 3.1.12 Multiple Vulnerabilities
2023-04-04 00:00:00