Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-6rj8-9cm9-6gff: phpMyFAQ vulnerable to Cross-site Scripting

phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the main branch of the repository and anticipated to be part of version 3.2.0-alpha.

ghsa
#xss#git#php

phpMyFAQ vulnerable to Cross-site Scripting

Moderate severity GitHub Reviewed Published Oct 19, 2022 • Updated Oct 19, 2022

Related news

CVE-2022-3608: Stored XSS and possible RCE/LFI in case of misconfiguration in phpmyfaq

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.