CVE-2023-2752

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in packagist/thorsten/phpmyfaq

Identifiers

GHSA-j657-pjgc-c4h6, CVE-2023-2752

Package Slug

packagist/thorsten/phpmyfaq

Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Description

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

Affected Versions

All versions before 3.2.0-beta

Solution

Upgrade to version 3.2.0-beta or above. Note: 3.2.0-beta may be an unstable version. Use caution.

Last Modified

2023-05-18

source