Description In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment. Remediation References CVE-2017-15727 Related Vulnerabilities Ruby on Rails Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2026-33195) Drupal Core 8.9.x Remote Code Execution (8.9.0 - 8.9.9) WordPress Plugin Chat-Support Board-WordPress Chat Privilege Escalation (3.3.8) Opencart CVE-2024-21519 Vulnerability (CVE-2024-21519) Contao Insufficient Session Expiration Vulnerability (CVE-2024-30262) Severity Medium Classification CVE-2017-15727 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities