Description

Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to footer.php or (2) PMF_LANG[metaLanguage] to header.php.

Remediation

References

CVE-2005-3047

Related Vulnerabilities

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13401)

Play Framework Uncontrolled Recursion Vulnerability (CVE-2020-26883)

WordPress Plugin WooCommerce Checkout Manager Multiple Unspecified Vulnerabilities (3.6.9)

GlassFish CVE-2016-5528 Vulnerability (CVE-2016-5528)

WordPress Plugin The Welcomizer 'twiz-index.php' Cross-Site Scripting (1.3.9.4)

Severity

Medium

Classification

CVE-2005-3047 CWE-707

Tags

Missing Update Known Vulnerabilities