vulnerability

FreeBSD: VID-33888815-631e-4bba-b776-a9b46fe177b5 (CVE-2017-14619): phpmyfaq -- multiple issues

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Sep 29, 2017

Added

Sep 29, 2017

Modified

Jun 15, 2026

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.

Solution

freebsd-upgrade-package-phpmyfaq

References

CVE-2017-14619
https://attackerkb.com/topics/CVE-2017-14619
CWE-79
EUVD-EUVD-2017-6120
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-6120

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report