CVE-2024-29179

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p42

Published

Mar 25, 2024 (Mar 25, 2024)

Modified

Jun 17, 2026

Description

phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. An attacker with admin privileges can upload an attachment containing JS code without extension and the application will render it as HTML which allows for XSS attacks.

Vendors: phpmyfaq
Products: phpmyfaq
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.