Description
Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
Remediation
References
Related Vulnerabilities
Drupal Core 5.x Multiple Security Bypass Vulnerabilities (5.0 - 5.10)
Plone CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5741)
XOOPS URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-12138)
Jboss EAP Incorrect Authorization Vulnerability (CVE-2019-14843)
WordPress Plugin easy pdf restaurant menu upload Cross-Site Scripting (1.1.1)