CVE-2023-5863: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

October 31, 2023 (updated November 1, 2023)

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

References

github.com/advisories/GHSA-j4vj-w5rj-8grw
github.com/thorsten/phpmyfaq/commit/97e813dcd2022bd10a8770569a8b02591716365f
huntr.com/bounties/fbfd4e84-61fb-4063-8f11-15877b8c1f6f
nvd.nist.gov/vuln/detail/CVE-2023-5863

Code Behaviors & Features

Detect and mitigate CVE-2023-5863 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →