Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2022-3608

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.

VectorNETWORK

PublishedOct 19, 2022, 13:15

Published Bysecurity@huntr.dev

Base Score

Score8.4

Package (Ecosystem)IntroducedFixedLimit

thorsten/phpmyfaq(Packagist)03.2.0-alphaN/A

phpmyfaq/phpmyfaq(Packagist)03.2.0-alphaN/A

CWE-79

Base Score

8.4

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK