Security Advisory

CVE-2024-28106

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-03-25 18:41:58

Last updated 2024-08-02 00:48:49

Assigner GitHub_M

CVSS score 4.3

State PUBLISHED

Description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. By manipulating the news parameter in a POST request, an attacker can inject malicious JavaScript code. Upon browsing to the compromised news page, the XSS payload triggers. This vulnerability is fixed in 3.2.6.

← Browse all CVEs View on cve.org ↗