Description
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14575 Vulnerability (CVE-2020-14575)
Mailman Other Vulnerability (CVE-2001-0290)
WordPress Plugin Related Posts Cross-Site Request Forgery (2.7.1)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (3.5.5)
WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress CSV Injection (1.6.3)