Skip to content

Phpmyfaq · weakness class

Cross-site Scripting

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.CVE-2010-4821Phpmyfaq · 4.7% likely

    CWE-79

  2. Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Questions field in an…CVE-2017-14618Phpmyfaq · 2.4% likely

    CWE-79

  3. Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configur…CVE-2017-14619Phpmyfaq · 2.2% likely

    CWE-79

  4. Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-0814Phpmyfaq · 2.0% likely

    CWE-79

  5. In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.CVE-2017-15727Phpmyfaq · 1.8% likely

    CWE-79

  6. Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpMyFAQ before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via (1) the lang parameter…CVE-2009-4780Phpmyfaq · 1.2% likely

    CWE-79

  7. Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFaq 1.5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) PMF_CONF[version] parameter to foot…CVE-2005-3047Phpmyfaq · 1.0% likely

    CWE-79

  8. Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web…CVE-2009-4040Phpmyfaq · 1.0% likely

    CWE-79

  9. inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.CVE-2017-7579Phpmyfaq · 0.7% likely

    CWE-79

  10. In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.CVE-2017-15809Phpmyfaq · 0.6% likely

    CWE-79

  11. In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.CVE-2017-15728Phpmyfaq · 0.6% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.