medium6.0
CVE-2023-2998
thorsten/phpmyfaq vulnerable to cross-site scripting
Impact
In thorsten/phpmyfaq prior to 3.1.14, when admins create a FAQ News, they can pass xss to the "text of the record" section.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | thorsten/phpmyfaq | < 3.1.14 | 3.1.14 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | before 3.1.14 |