Threats tagged 'ghsa-2xm9-x25x-7x5q'

1 threat

Threats tagged 'ghsa-2xm9-x25x-7x5q'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.2%	CVE-2026-85593phpMyFAQ · Cross-site Scripting Medium5.1EPSS 0.2%2026-09-04CVE Database V5CVE-2026-85593 phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection. Authenticated users with FAQ editing privileges can inject JavaScript payloads that execute in the browsers of all users viewing the affected FAQ pages. EPSS 0.2%Vulnerability thorsten #ghsa-2xm9-x25x-7x5q	CVE Database V5	2026-09-04

Showing 1–1 of 1 result