GHSA-jph3-3j24-pg3j
thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | thorsten/phpmyfaq | < 3.1.12 | 3.1.12 |
Details
As written in the advisory (Markdown source, shown as plain text).
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to DOM cross-site scripting (XSS) because it fails to sanitize user input in the configuration privacy note URL parameter. This has been fixed in 3.1.12.
References
External links from the advisory. They lead to third-party sites.