GHSA-3j93-7rf7-p7m6

ghsaUSosv

thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter

view advisory published 2023-04-05Licence: CC-BY-4.0

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting (XSS) because it fails to sanitize user input in the FAQ comment username parameter. This has been fixed in 3.1.12.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-1758US	medium5.4	0.54% (45th)	—	2023-04-05
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

references

External citations — patches, advisories, analysis.

https://github.com/thorsten/phpMyFAQPACKAGE
https://github.com/thorsten/phpmyfaq/commit/f3380f46c464d1bc6f3ded29213c79be0de8fc57WEB
https://huntr.dev/bounties/0854328e-eb00-41a3-9573-8da8f00e369cWEB
https://nvd.nist.gov/vuln/detail/CVE-2023-1758ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan