CVE-2023-3469
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
The thorsten/phpmyfaq GitHub repository prior to version 3.2.0-beta.2 is vulnerable to reflected Cross-site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts that will be executed in users' browsers.
Risk Assessment
This vulnerability may lead to the theft of user session data or other sensitive information. It poses a threat to the security of the application and its users.
Recommendation
It is recommended to upgrade to version 3.2.0-beta.2 or later to mitigate this vulnerability. Additionally, implementing XSS protection mechanisms is advisable.
Other vulnerabilities in thorsten/phpmyfaq
See all- CVE-2023-4006Critical
In the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, there is improper neutralization of formula elements in a CSV file.
- CVE-2023-4007Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, allowing for the storage of malicious code.
Original NVD description (English source)
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.