medium5.4
CVE-2022-4408
phpMyFAQ vulnerable to Cross-site Scripting
Impact
phpMyFAQ prior to version 3.1.9 is vulnerable to stored Cross-site Scripting (XSS).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | thorsten/phpmyfaq | < 3.1.9 | 3.1.9 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | before 3.1.9 |