Description In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary. Remediation References CVE-2017-15729 Related Vulnerabilities WordPress Plugin Shortlinks by Pretty Links-Best WordPress Link Tracking Multiple SQL Injection Vulnerabilities (1.4.56) Dotclear Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3783) WordPress Plugin Gravity Forms Constant Contact Cross-Site Scripting (1.0.5) WebLogic CVE-2017-10271 Vulnerability (CVE-2017-10271) Joomla! Core 3.x.x Multiple Vulnerabilities (3.0.0 - 3.10.6) Severity High Classification CVE-2017-15729 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities