Description In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. Remediation References CVE-2017-15808 Related Vulnerabilities WordPress Plugin Cherry Cross-Site Scripting (1.2.8.1) WordPress Plugin WP Symposium SQL Injection (15.1) WordPress Plugin BitMonet Cross-Site Scripting (1.0) Ampache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41665) Perl Resource Management Errors Vulnerability (CVE-2013-1667) Severity High Classification CVE-2017-15808 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities