Phpmyfaq: >> Phpmyfaq >> 2.9.7 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.
CVSS Score
6.1
EPSS Score
0.022
Published
2017-09-20
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.
CVSS Score
9.8
EPSS Score
0.01
Published
2017-07-12
Page 12