CVE-2002-0230: Faq-O-Matic

Medium severity, CVSS 5.0. EPSS: 7.7% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.

Affected products

• Faq-O-Matic Faq-O-Matic: version 2.712 only

Published 2002-05-16. Last modified 2026-06-16.