Description

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Remediation

References

CVE-2023-1880

Related Vulnerabilities

WordPress Plugin iThemes Security (formerly Better WP Security) Unspecified Vulnerability (6.9.0)

Drupal Core 9.3.x Cross-Site Scripting (9.3.0 - 9.3.18)

e107 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2018-16388)

WordPress Plugin Paid Downloads 'download_key' Parameter SQL Injection (2.01)

Joomla! Core 1.5.x Directory Traversal (1.5.0 - 1.5.8)

Severity

Medium

Classification

CVE-2023-1880 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities