Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4574
HistoryJul 14, 2017 - 10:51 a.m.

Cross-site Request Forgery (CSRF)

2017-07-1410:51:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.003 Low

EPSS

Percentile

70.4%

phpMyFAQ is vulnerable to cross-site request forgery (CSRF). The library does not properly escape certain strings, allowing a malicious website to change a user’s settings.

CPENameOperatorVersion
phpmyfaq/phpmyfaqle2.8.5

0.003 Low

EPSS

Percentile

70.4%