PT-2024-2371 · Phpmyfaq · Phpmyfaq
Kevinnivekkevin
·
Published
2024-03-25
·
Updated
2025-01-09
·
CVE-2024-29179
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:L/Au:M/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
phpMyFAQ versions 8.1 and later
Description
The issue is related to the lack of protection for the web page structure, allowing an attacker to conduct cross-site scripting (XSS) attacks using specially crafted .html files. An attacker with admin privileges can upload an attachment containing JavaScript code without an extension, and the application will render it as HTML, enabling XSS attacks. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited.
Recommendations
For phpMyFAQ versions 8.1 and later, consider disabling the ability to upload attachments without extensions as a temporary workaround until a patch is available. Restrict access to the attachment upload feature to minimize the risk of exploitation. Avoid using the attachment upload feature until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Phpmyfaq