Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-1884
HistoryApr 05, 2023 - 12:00 a.m.

CVE-2023-1884 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

2023-04-0500:00:00
CWE-79
@huntrdev
www.cve.org
3
cve-2023-1884
cross-site scripting
xss
github
thorsten
phpmyfaq

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

33.2%

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CNA Affected

[
  {
    "vendor": "thorsten",
    "product": "thorsten/phpmyfaq",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.1.12",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

33.2%

Related for CVELIST:CVE-2023-1884