github.comConfirmation
https://github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435 CVE-2017-15727
MEDIUM
PHPMyFAQ 2.9.8 - Cross-Site Scripting (3)
Record summary
CVE-2017-15727 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPHPMyFAQ 2.9.8 - Cross-Site Scripting (3)ExploitDB exploitby Nikhil MittalNot analyzed1 file
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-15727 43063exploit
https://www.exploit-db.com/exploits/43063