CVE-2014-0814

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-14 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

thorsten phpMyFAQ: through 2.8.5; 1.0, 1.0.1, 1.0.1a, 1.1.0, 1.1.1, 1.1.2 (+138)

References

http://jvn.jp/en/jp/JVN30050348/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000015
http://osvdb.org/102940
http://secunia.com/advisories/56006
http://www.phpmyfaq.de/advisory_2014-02-04.php
http://www.securityfocus.com/bid/65368
http://jvn.jp/en/jp/JVN30050348/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000015
http://osvdb.org/102940
http://secunia.com/advisories/56006
http://www.phpmyfaq.de/advisory_2014-02-04.php
http://www.securityfocus.com/bid/65368

Get alerted when CVE-2014-0814 or the next vulnerability affects your stack