Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2014-0814

Related Vulnerabilities

WordPress Plugin Encrypted Contact Form Multiple Vulnerabilities (1.0.4)

WordPress Plugin Themify Portfolio Post Cross-Site Scripting (1.1.6)

WordPress Plugin Mobile Booster Security Bypass (1.0)

WordPress Plugin 3D Banner Rotator 'upload.php' Arbitrary File Upload (2.1)

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (3.0.30)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2014-0814