CyberRota Analysis
AI-GeneratedThe stored cross-site scripting (XSS) vulnerability in phpMyFAQ versions prior to 4.2.0-alpha allows unauthenticated users or low-privileged registered users to inject malicious JavaScript that executes in an administrator's browser, potentially leading to session theft and admin account takeover. This issue arises from improper handling of HTML entities and lack of output sanitization in the admin interface. Organizations using affected versions should prioritize upgrading to 4.2.0-alpha to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
phpMyFAQ is an open source FAQ web application. A stored cross-site scripting (XSS) vulnerability in versions prior to 4.2.0-alpha allows any unauthenticated user (or low-privileged registered user) to inject arbitrary JavaScript that executes in an administrator's browser when they review or edit a user-submitted FAQ entry. This leads to admin account takeover via session theft. The vulnerability exists because `html_entity_decode()` converts HTML entities into executable HTML after `strip_tags()` has already passed them through, and the admin template renders the content with Twig's `|raw` filter without any output sanitization. Version 4.2.0-alpha fixes the issue.