Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37727
HistoryNov 01, 2022 - 2:48 a.m.

Cross-Site Scripting (XSS)

2022-11-0102:48:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
cross-site scripting
vulnerability
special characters
injection
html
script
website
security issue

EPSS

0.001

Percentile

21.4%

thorsten/phpmyfaq is vulnerable to cross-site scripting. The vulnerability exists in multiple functions due to a missing check on special characters for page ID, allowing an attacker to inject arbitrary html and script code into the website.

EPSS

0.001

Percentile

21.4%