logo

Database

Reflected cross-site scripting (XSS) In thorsten/phpmyfaq

Description

phpMyFAQ Reflected Cross-site Scripting vulnerability Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2023-03142. NVD-2023-03143. OSV-2023-03144. GCVE-2023-0314

References

1. https://github.com/thorsten/phpmyfaq/commit/3872e7eac2ddeac182fc1335cc312d1392d56f982. https://huntr.dev/bounties/eac0a9d7-9721-4191-bef3-d43b0df59c67

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.