[thorsten/phpmyfaq] thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to cross-site scripting (XSS) because it fails to sanitize user input in the stopword parameter. This has been fixed in 3.1.12.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-1884
• https://github.com/thorsten/phpmyfaq/commit/7f0f921de74c88038826c46bbd2a123518d9d611
• https://huntr.dev/bounties/dda73cb6-9344-4822-97a1-2e31efb6a73e
• https://github.com/advisories/GHSA-gmjj-g2rm-xwm7