CVE-2005-3734: Phpmyfaq

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.

Affected products

• Phpmyfaq Phpmyfaq: version 1.5 only; version 1.5.1 only; version 1.5.3 only; version 1.5_alpha1 only; version 1.5_alpha2 only; version 1.5_beta1 only; …

Published 2005-11-22. Last modified 2026-06-16.