CVE-2017-18364: Frank-Karau Phpfk

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.

Affected products

• Frank-Karau Phpfk: affected versions not specified

Published 2019-03-27. Last modified 2026-06-17.