Description

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Remediation

References

CVE-2023-1885

Related Vulnerabilities

WordPress Plugin WP Photo Album Plus Cross-Site Scripting (5.4.7)

WordPress Plugin TagNinja 'id' Parameter Cross-Site Scripting (1.0)

WordPress Plugin BulletProof Security Multiple Cross-Site Scripting Vulnerabilities (.53.2)

ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9783)

WordPress Plugin The Events Calendar:Eventbrite Tickets Cross-Site Scripting (3.9.6)

Severity

Medium

Classification

CVE-2023-1885 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities