Phpmyfaq: >> Phpmyfaq Security Vulnerabilities
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
CVSS Score
5.4
EPSS Score
0.002
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
CVSS Score
4.8
EPSS Score
0.002
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
CVSS Score
8.8
EPSS Score
0.004
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
CVSS Score
8.8
EPSS Score
0.001
Published
2017-10-22
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
CVSS Score
4.8
EPSS Score
0.007
Published
2017-09-20