← All advisories

Medium severity5.4NVD Advisory· Published Oct 22, 2017· Updated Jun 17, 2026

CVE-2017-15727

CVE-2017-15727

Description

In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

PhpMyAdmin/Phpmyfaq2 versions
cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*range: <=2.9.8
- (no CPE)range: <2.9.9

Patches

Vulnerability mechanics

References

2

github.com/thorsten/phpMyFAQ/commit/5c3e4f96ff0ef6b91a3f0aa64eb28197c5cf5435nvdPatchThird Party Advisory
www.exploit-db.com/exploits/43063/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.