CVE-2023-3469
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
The thorsten/phpmyfaq GitHub repository prior to version 3.2.0-beta.2 is vulnerable to reflected Cross-site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts that will be executed in users' browsers.
Risk Assessment
This vulnerability may lead to the theft of user session data or other sensitive information. It poses a threat to the security of the application and its users.
Recommendation
It is recommended to upgrade to version 3.2.0-beta.2 or later to mitigate this vulnerability. Additionally, implementing XSS protection mechanisms is advisable.
Original NVD description (English source)
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

