CVE-2023-5320: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

September 30, 2023 (updated October 2, 2023)

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

References

github.com/advisories/GHSA-pp4w-g5p4-85p2
github.com/thorsten/phpmyfaq/commit/e92369543959772adcdab4f36c837faa27490346
huntr.dev/bounties/3a2bc18b-5932-4fb5-a01e-24b2b0443b67
nvd.nist.gov/vuln/detail/CVE-2023-5320

Detect and mitigate CVE-2023-5320 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →