Description In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. Remediation References CVE-2017-15808 Related Vulnerabilities Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.34) SharePoint Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0260) WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.61) WordPress Plugin Testimonial Rotator Cross-Site Scripting (3.0.3) WordPress Plugin Rencontre-Dating Site Multiple Vulnerabilities (3.1.2) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities CWE-352 CVE-2017-15808