Lucene search
Veracode Vulnerability DatabaseVERACODE:40568HistoryMay 17, 2023 - 7:36 a.m.
Cross-Site Scripting (XSS)
2023-05-1707:36:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
cross-site scripting
thorsten/phpmyfaq
vulnerability
user inputs
mail parameter
arbitrary javascript
attack
EPSS
0.001
Percentile
34.5%
thorsten/phpmyfaq is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists in record.questions.php due to lack of sanitization of the user inputs of mail parameter which allows an attacker to inject and execute arbitrary javascript.
Related
huntr
huntr
Multiple Stored XSS via mail parameter
2023-04-02 05:19:27
github
github
Cross Site Scripting in thorsten/phpmyfaq
2023-05-05 21:31:11
cvelist
cvelist
CVE-2023-2550 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
2023-05-05 00:00:00
nvd
nvd
CVE-2023-2550
2023-05-05 20:15:10
prion
prion
Cross site scripting
2023-05-05 20:15:00
osv
osv
Cross Site Scripting in thorsten/phpmyfaq
2023-05-05 21:31:11
CVE-2023-2550
2023-05-05 20:15:10
cve
cve
CVE-2023-2550
2023-05-05 20:15:10
openvas
openvas
phpMyFAQ < 3.1.13 Multiple Vulnerabilities
2023-05-04 00:00:00