Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-0814

Related Vulnerabilities

WordPress Plugin 10Web AI Assistant-AI content writing assistant Security Bypass (1.0.18)

Oracle JRE CVE-2023-22041 Vulnerability (CVE-2023-22041)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2019-8159)

WordPress Plugin Our Team Showcase Cross-Site Request Forgery (1.2)

WordPress Plugin Podlove Podcast Publisher SQL Injection (2.5.3)

Severity

Medium

Classification

CVE-2014-0814 CWE-707

Tags

Missing Update Known Vulnerabilities