Phpmyfaq: >> Phpmyfaq >> 2.9.8 Security Vulnerabilities
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-10-22
Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an "Add New FAQ" action.
CVSS Score
4.8
EPSS Score
0.006
Published
2017-09-20
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
CVSS Score
6.1
EPSS Score
0.011
Published
2017-09-20
Page 10