CVE-2023-4006
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
In the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, there is improper neutralization of formula elements in a CSV file.
Risk Assessment
This vulnerability may lead to unauthorized formula execution, posing a risk to user data and system integrity.
Recommendation
It is recommended to upgrade to version 3.1.16 or later to mitigate this vulnerability.
Other vulnerabilities in thorsten/phpmyfaq
See all- CVE-2023-4007Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, allowing for the storage of malicious code.
- CVE-2023-3469Medium
The thorsten/phpmyfaq GitHub repository prior to version 3.2.0-beta.2 is vulnerable to reflected Cross-site Scripting (XSS). An attacker can exploit this vulnerability to inject malicious scripts that will be executed in users' browsers.
Original NVD description (English source)
Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.