FreeBSD: VID-005DFB48-990D-11ED-B9D3-589CFC0F81B0: phpmyfaq -- multiple vulnerabilities

FreeBSD: VID-005DFB48-990D-11ED-B9D3-589CFC0F81B0: phpmyfaq -- multiple vulnerabilities

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

01/15/2023

Created

01/24/2023

Added

01/22/2023

Modified

01/22/2023

Description

phpmyfaq developers report:

phpMyFAQ does not implement sufficient checks to avoid a stored

XSS in "Add new question"

phpMyFAQ does not implement sufficient checks to avoid a stored XSS

in admin user page

phpMyFAQ does not implement sufficient checks to avoid a stored XSS

in FAQ comments

phpMyFAQ does not implement sufficient checks to avoid a blind

stored XSS in admin open question page

phpMyFAQ does not implement sufficient checks to avoid a reflected

XSS in the admin backend login

phpMyFAQ does not implement sufficient checks to avoid stored XSS

on user, category, FAQ, news and configuration admin backend

phpMyFAQ does not implement sufficient checks to avoid weak passwords

Solution(s)

• freebsd-upgrade-package-phpmyfaq