Description

Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.

Remediation

References

CVE-2005-3734

Related Vulnerabilities

Oracle HTTP Server CVE-2021-2315 Vulnerability (CVE-2021-2315)

WordPress Plugin WooCommerce-GloBee Payment Gateway Security Bypass (1.1.1)

WordPress Plugin Analytics Stats Counter Statistics PHP Object Injection (1.2.2.5)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-12708)

WordPress Plugin Download Monitor Cross-Site Scripting (1.7.0)

Severity

Medium

Classification

CVE-2005-3734

Tags

Missing Update Known Vulnerabilities