Cross-site Scripting in thorsten/phpmyfaq

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0791 · ADVISORY
• thorsten/phpmyfaq commit 26663ef · WEB
• thorsten/phpMyFAQ · PACKAGE
• huntr.com/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d · WEB
• huntr.dev/bounties/7152b340-c6f3-4ac8-9f62-f764a267488d · Permissions Required

thorsten/phpmyfaq의 다른 취약점

• CVE-2026-56738높음 8.5phpMyFAQ is an open source FAQ web application. The `StopWords::add()` method inversions prior to 4.1.6 builds a SQL `INSERT` statement usin…
• CVE-2026-47132보통 5.4phpMyFAQ is an open source FAQ web application. Prior to version 4.2.0-alpha, an authenticated SQL LIKE wildcard injection vulnerability in …
• CVE-2026-56737높음 8.1phpMyFAQ is an open source FAQ web application. Versions 3.2.0 through 4.1.5 contain an authentication bypass in its public two-factor authe…
• CVE-2026-56736높음 8.2phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows an…
• CVE-2026-57994보통 5.3phpMyFAQ before 4.1.5 applies inconsistent active=yes and publication-date filtering across its public FAQ API endpoints, allowing unauthent…