Server side cross-site scripting In thorsten/phpmyfaq
Description
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting (XSS) because it fails to sanitize user input in the artlang parameter. This has been fixed in 3.1.12.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 3.1.12 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.