Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
110 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
Recommended action: Upgrade to 3.1.10 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
Recommended action: Upgrade to 3.1.10 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ prior to version 3.1.9 is vulnerable to stored Cross-site Scripting (XSS).
Recommended action: Upgrade to 3.1.9 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ prior to version 3.1.9 is vulnerable to reflected Cross-site Scripting (XSS).
Recommended action: Upgrade to 3.1.9 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ is contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in versions prior to 3.1.9.
Recommended action: Upgrade to 3.1.9 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ prior to version 3.1.8 is vulnerable to reflected cross-site scripting.
Recommended action: Upgrade to 3.1.8 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ prior to version 3.1.8 is vulnerable to stored Cross-site Scripting.
Recommended action: Upgrade to 3.1.8 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ prior to version 3.1.8 has Weak Password Requirements. Version 3.1.8 introduces an eight-character minimum password length.
Recommended action: Upgrade to 3.1.8 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the main branch of the repository and anticipated to be part of version 3.2.0-alpha.
Recommended action: Upgrade to 3.2.0-alpha (pre-release) or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Recommended action: Upgrade to 2.9.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.