Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Release: thorsten/phpmyfaq 3.1.10 Clear all filters
TI-2023-00298 CVE-2023-0313 · GHSA-x2h8-4mhh-5hwh

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00419 Published 2023-01-15 Fixed in 3.1.10 CWE-79
TI-2023-00296 CVE-2023-0311 · GHSA-g92r-9rxw-cmgx

Improper Authentication in thorsten/phpmyfaq

Priority HIGH 82

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00971 Published 2023-01-15 Fixed in 3.1.10 CWE-287
TI-2023-00295 CVE-2023-0310 · GHSA-9jff-8xmm-mw22

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00571 Published 2023-01-15 Fixed in 3.1.10 CWE-79
TI-2023-00294 CVE-2023-0309 · GHSA-25c3-7fvj-v45j

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00509 Published 2023-01-15 Fixed in 3.1.10 CWE-79
TI-2023-00293 CVE-2023-0308 · GHSA-w475-749h-c77m

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00509 Published 2023-01-15 Fixed in 3.1.10 CWE-79
TI-2023-00292 CVE-2023-0307 · GHSA-4p88-cfhq-f3vg

Weak Password Requirements in thorsten/phpmyfaq

Priority HIGH 75

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00673 Published 2023-01-15 Fixed in 3.1.10 CWE-521
TI-2023-00291 CVE-2023-0306 · GHSA-96x6-jf5w-84c5

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Priority MEDIUM 60

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2023-01-15 Fixed in 3.1.10 CWE-79