CVE-2023-0787: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

February 12, 2023 (updated February 14, 2023)

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

References

github.com/advisories/GHSA-gxxj-x426-xj2w
github.com/thorsten/phpmyfaq/commit/b76d58321a7a595eeaf4f7a30403ca6cd8506612
huntr.dev/bounties/87397c71-7b84-4617-a66e-fa6c73be9024
nvd.nist.gov/vuln/detail/CVE-2023-0787

Code Behaviors & Features

Detect and mitigate CVE-2023-0787 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →