Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.

Remediation

References

CVE-2009-4040

Related Vulnerabilities

Moodle Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2016-5013)

WordPress Other Vulnerability (CVE-2005-1810)

WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.2.0)

WordPress Plugin DP Thumbnail TimThumb Arbitrary File Upload (1.0)

Drupal Core 8.x Multiple Vulnerabilities (8.0.0 - 8.3.3)

Severity

Medium

Classification

CVE-2009-4040 CWE-707

Tags

Missing Update Known Vulnerabilities