CVE Catalog

CVE-2023-3469

MediumCVSS 4.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.58%

43th percentile - higher than 43% of all known CVEs

Summary

The thorsten/phpmyfaq GitHub repository prior to version 3.2.0-beta.2 is vulnerable to reflected Cross-site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts that will be executed in users' browsers.

Risk Assessment

This vulnerability may lead to the theft of user session data or other sensitive information. It poses a threat to the security of the application and its users.

Recommendation

It is recommended to upgrade to version 3.2.0-beta.2 or later to mitigate this vulnerability. Additionally, implementing XSS protection mechanisms is advisable.

Original NVD description (English source)

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS