CVE-2017-14619

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2017-14619

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14619.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-14619

Published

2017-09-20T21:29:00.350Z

Modified

2026-07-08T05:49:33.465196012Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.

References

Affected packages

Git / github.com/thorsten/phpmyfaq

Affected ranges

Type

GIT

Repo

https://github.com/thorsten/phpmyfaq

Events

Introduced

Last affected

b6fdb76bbb7e7d9b1fc982085367ecff5d5fca85

Fixed

30b0025e19bd95ba28f4eff4d259671e7bb6bb86

Database specific

{
    "cpe": "cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.9.8"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.6.0

2.6.0-RC

2.6.0-alpha

2.6.0-beta

2.6.1

2.6.2

2.6.3

2.6.4

2.6.5

2.6.6

2.6.7

2.7.0-RC

2.7.0-alpha

2.7.0-alpha2

2.7.0-beta

2.7.0-beta2

2.7.0-beta3

2.8.0

2.8.0-RC

2.8.0-RC2

2.8.0-RC3

2.8.0-RC4

2.8.0-alpha2

2.8.0-alpha3

2.8.0-beta

2.8.0-beta2

2.8.0-beta3

2.8.1

2.8.2

2.9.0

2.9.0-RC

2.9.0-RC2

2.9.0-RC3

2.9.0-RC4

2.9.0-alpha

2.9.0-alpha2

2.9.0-alpha3

2.9.0-alpha4

2.9.0-beta

2.9.0-beta2

2.9.1

2.9.2

2.9.3

2.9.4

2.9.5

2.9.6

2.9.7

2.9.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14619.json"