A stored cross-site scripting vulnerability in phpMyFAQ allows authenticated attackers to execute arbitrary scripts in the context of other users' sessions.

This is a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) occurring within the comment rendering component. The attack requires the user to have low privileges (PR:L) and involves the interaction of a victim (UI:P).

The CVSS score of 7.6 (High) highlights the risk of session hijacking and unauthorized data access. By injecting malicious scripts, an attacker could steal session cookies, perform actions on behalf of administrative users, or redirect users to malicious external sites, damaging both user trust and organizational reputation.

Immediate Action: Update phpMyFAQ to version 4.1.2 or later, where the input sanitization for comment rendering has been corrected.

Proactive Monitoring: Inspect web application logs for suspicious characters or script tags within user-submitted comments or content fields.

Compensating Controls: Implement a robust Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize WAF rules to detect and block common XSS payloads.

Public Exploit Available: No (exploit_available: false)

Given the potential for account takeover through XSS, immediate application of the patch is necessary. Organizations should ensure that all instances of phpMyFAQ are updated to the secure version 4.1.2 to eliminate the XSS vector.