CVE-2024-55889

phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fixes the issue.

Affected

thorsten · phpMyFAQ

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 GITHUB

4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS

2.19% chance of exploitation in the next 30 days, 82nd percentile

Published

2024-12-13

Proof-of-concept exploits (2)

• thorsten/phpMyFAQ/security/advisories/GHSA-m3r7-8gw7-qwvc
• advisories/GHSA-m3r7-8gw7-qwvc

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52235

Security advisories

• thorsten/phpMyFAQ/commit/fa0f7368dc3288eedb1915def64ef8fb270f711d

References

• CVE Record
• NVD entry