CVE-2023-1887 Business Logic Errors in thorsten/phpmyfaq

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12...

CVE-2023-1887

CVE-2023-1887 affects thorsten/phpmyfaq prior to 3.1.12. The vulnerability stems from business logic errors that let users with edit-only permissions add/delete categories and add FAQs. The issue is fixed in version 3.1.12. Affected versions before 3.1.12 should upgrade to 3.1.12 or apply the ven...

phpMyFAQ < 3.1.12 Multiple Vulnerabilities

phpMyFAQ is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyfaq:phpmyfaq"; if description...