CVE-2023-6889

Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

Affected

thorsten · thorsten/phpmyfaq

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v3.0 HUNTR

5.4 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS

0.46% chance of exploitation in the next 30 days, 39th percentile

Published

2023-12-16

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://huntr.com/bounties/52897778-fad7-4169-bf04-a68a0646df0c

Security advisories

• advisories/GHSA-w8xj-992g-842f
• thorsten/phpmyfaq/commit/1037a8f012e0d9ec4bf4c8107972f6695e381392

References

• CVE Record
• NVD entry