Description In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php. Remediation References CVE-2017-15732 Related Vulnerabilities TYPO3 Other Vulnerability (CVE-2009-3630) WordPress Plugin AccessPress iFeeds includes Backdoor [Only if downloaded via the vendor website] (4.0.3) WordPress Plugin SVG Support Cross-Site Scripting (2.3.19) MySQL CVE-2024-21129 Vulnerability (CVE-2024-21129) Next.js Incorrect Authorization Vulnerability (CVE-2024-51479) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-15732