Description In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary. Remediation References CVE-2017-15729 Related Vulnerabilities MySQL CVE-2016-5624 Vulnerability (CVE-2016-5624) WordPress Plugin E-Search Multiple Cross-Site Scripting Vulnerabilities (1.0) WordPress Plugin Spectra-WordPress Gutenberg Blocks Multiple Security Bypass Vulnerabilities (2.3.0) Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-17822) WordPress Plugin WH Testimonials Cross-Site Scripting (3.0.0) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-15729