Cross-site Scripting (XSS)

2017-10-2300:52:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

30.5%

JSON

phpmyfaq is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary web script by uploading a HTML file to the application.

CPENameOperatorVersion
phpmyfaq/phpmyfaqle2.9.8
thorsten/phpmyfaqle2.9.8

CPE	Name	Operator	Version
	phpmyfaq/phpmyfaq	le	2.9.8
	thorsten/phpmyfaq	le	2.9.8

References

github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435

0.001 Low

EPSS

Percentile

30.5%

JSON

Related for VERACODE:5300