GHSA-6rj8-9cm9-6gff
phpMyFAQ vulnerable to Cross-site Scripting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | thorsten/phpmyfaq | < 3.2.0-alpha | 3.2.0-alpha |
| Packagist | phpmyfaq/phpmyfaq | < 3.2.0-alpha | 3.2.0-alpha |
Details
As written in the advisory (Markdown source, shown as plain text).
phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the `main` branch of the repository and anticipated to be part of version 3.2.0-alpha.
References
External links from the advisory. They lead to third-party sites.