Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.

Remediation

References

CVE-2017-14619

Related Vulnerabilities

Caddy Web Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)

WordPress Plugin Solve Media CAPTCHA Cross-Site Request Forgery (1.1.0)

WordPress Plugin WP Google Maps Multiple Cross-Site Scripting Vulnerabilities (8.1.12)

Nginx Out-of-bounds Read Vulnerability (CVE-2023-27730)

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads Cross-Site Request Forgery (2.3.9)

Severity

Medium

Classification

CVE-2017-14619 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities