Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters.
| Software | From | Fixed in |
|---|---|---|
| faq-o-matic / faq-o-matic | - | 2.711.x |