Server side cross-site scripting In thorsten/phpmyfaq
Description
thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter thorsten/phpmyfaq prior to 3.1.12 is vulnerable to stored cross-site scripting (XSS) because it fails to sanitize user input in the FAQ comment username parameter. This has been fixed in 3.1.12.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 3.1.12 |
Aliases
1. 2. 3. 4.
References
1. 2.