high8.4
CVE-2022-3608
phpMyFAQ vulnerable to Cross-site Scripting
Impact
phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the `main` branch of the repository and anticipated to be part of version 3.2.0-alpha.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | thorsten/phpmyfaq | <= 3.1.7 | 3.2.0-alpha |
| composer | phpmyfaq/phpmyfaq | <= 3.1.7 | 3.2.0-alpha |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | through 3.1.7 |