Lucene search

CVE-2023-0314 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

🗓️ 15 Jan 2023 00:00:00Reported by @huntrdevType

Reflected Cross-site Scripting (XSS) in thorsten/phpmyfaq prior to version 3.1.10

Reporter	Title	Published	Views	Family All 10
OSV	phpMyFAQ Reflected Cross-site Scripting vulnerability	16 Jan 202300:30	–	osv
OSV	CVE-2023-0314	15 Jan 202322:15	–	osv
Prion	Cross site scripting	15 Jan 202322:15	–	prion
NVD	CVE-2023-0314	15 Jan 202322:15	–	nvd
Veracode	Cross-site Scripting (XSS)	29 Jan 202306:15	–	veracode
Huntr	Reflect XSS Which can help in any CSRF Vulnerability	13 Dec 202210:19	–	huntr
Github Security Blog	phpMyFAQ Reflected Cross-site Scripting vulnerability	16 Jan 202300:30	–	github
CNVD	phpMyFAQ cross-site scripting vulnerability (CNVD-2023-04311)	16 Jan 202300:00	–	cnvd
CVE	CVE-2023-0314	15 Jan 202322:15	–	cve
OpenVAS	phpMyFAQ < 3.1.10 Multiple Vulnerabilities	16 Jan 202300:00	–	openvas

[
  {
    "vendor": "thorsten",
    "product": "thorsten/phpmyfaq",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.1.10",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.dev/bounties/eac0a9d7-9721-4191-bef3-d43b0df59c67
github	www.github.com/thorsten/phpmyfaq/commit/3872e7eac2ddeac182fc1335cc312d1392d56f98

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jan 2023 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.5

EPSS0.00147

CWE-79