Description

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Remediation

References

CVE-2023-1885

Related Vulnerabilities

Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.11)

WordPress Ultimate Member Plugin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-12276)

concrete5 Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-13790)

WordPress Plugin Gallery for Social Photo Cross-Site Request Forgery (1.0.0.27)

WordPress Plugin WPeMatico RSS Feed Fetcher Cross-Site Scripting (2.6.11)

Severity

Medium

Classification

CVE-2023-1885 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities