Vulnerabilities

TI-2023-01655 CVE-2023-1762 · GHSA-xww4-w6ff-5q3g

Improper Privilege Management in thorsten/phpmyfaq

HIGH 73

Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00876 Published 2023-03-31 Fixed in 3.1.12 CWE-269

TI-2023-01654 CVE-2023-1761 · GHSA-6cpg-gqgq-2rrr

LOW 29

Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00476 Published 2023-03-31 Fixed in 3.1.12 CWE-79

TI-2023-01653 CVE-2023-1760 · GHSA-7q9c-f2v8-j8gw

MEDIUM 57

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00532 Published 2023-03-31 Fixed in 3.1.12 CWE-79

TI-2023-01652 CVE-2023-1759 · GHSA-4wfc-ghv5-2v7j

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00473 Published 2023-03-31 Fixed in 3.1.12 CWE-79

TI-2023-01648 CVE-2023-1755 · GHSA-hp8m-g55r-9cfq

MEDIUM 60

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00615 Published 2023-03-31 Fixed in 3.1.12 CWE-79

TI-2023-01647 CVE-2023-1754 · GHSA-gvg8-r8w2-9gfj

MEDIUM 55

Improper Neutralization of Input During Web Page Generation in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00601 Published 2023-03-31 Fixed in 3.1.12 CWE-79

TI-2023-01646 CVE-2023-1753 · GHSA-4p4m-5qp7-479x

MEDIUM 43

Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00724 Published 2023-03-31 Fixed in 3.1.12 CWE-521