Vulnerabilities

TI-2023-01773 CVE-2023-1887 · GHSA-gx43-fqrx-6fcw

Business Logic Errors in thorsten/phpmyfaq

LOW 21

Business Logic Errors in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00699 Published 2023-04-05 Fixed in 3.1.12 CWE-840

TI-2023-01772 CVE-2023-1886 · GHSA-4cr4-x82x-hwm9

Authentication Bypass by Capture-replay in thorsten/phpmyfaq

MEDIUM 50

Authentication Bypass by Capture-replay in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00875 Published 2023-04-05 Fixed in 3.1.12 CWE-294

TI-2023-01771 CVE-2023-1885 · GHSA-xxm6-ff3x-v4vm

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

LOW 29

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00476 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01770 CVE-2023-1884 · GHSA-gmjj-g2rm-xwm7

Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

MEDIUM 60

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00447 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01769 CVE-2023-1883 · GHSA-2wjp-w7g7-h63q

Improper Access Control in thorsten/phpmyfaq

MEDIUM 58

Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00492 Published 2023-04-05 Fixed in 3.1.12 CWE-284

TI-2023-01768 CVE-2023-1882 · GHSA-jph3-3j24-pg3j

Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

MEDIUM 60

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00532 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01766 CVE-2023-1880 · GHSA-m8q9-7v2f-qjx9

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

LOW 33

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01644 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01765 CVE-2023-1879 · GHSA-m9qm-m5w5-9pgj

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01764 CVE-2023-1878 · GHSA-gcmq-7652-x98j

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00537 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01651 CVE-2023-1758 · GHSA-3j93-7rf7-p7m6

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq

MEDIUM 60

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00536 Published 2023-04-05 Fixed in 3.1.12 CWE-75

TI-2023-01650 CVE-2023-1757 · GHSA-jvjx-qqh7-6x6c

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00532 Published 2023-04-05 Fixed in 3.1.12 CWE-79

TI-2023-01649 CVE-2023-1756 · GHSA-8p48-ghv5-7qq7

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00472 Published 2023-04-05 Fixed in 3.1.12 CWE-79

Vulnerabilities

Filters