Vulnerabilities

TI-2022-04034 CVE-2022-4409 · GHSA-wpgc-5cr5-h9gg

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq

HIGH 66

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0046 Published 2022-12-11 Fixed in 3.1.9 CWE-614

TI-2022-04033 CVE-2022-4408 · GHSA-rjf6-wj7r-5fj2

HIGH 66

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00511 Published 2022-12-11 Fixed in 3.1.9 CWE-79

TI-2022-04032 CVE-2022-4407 · GHSA-cp9c-phxx-55xm

HIGH 68

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04853 Published 2022-12-11 Fixed in 3.1.9 CWE-79