inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7579.json"