Server side cross-site scripting In thorsten/phpmyfaq
Description
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting (XSS) because it fails to sanitize user input in the updatecategory parameter. This has been fixed in 3.1.12.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 3.1.12 |
Aliases
1. 2. 3. 4.
References
1. 2. 3.