medium6.7
CVE-2023-2999
thorsten/phpmyfaq vulnerable to cross-site scripting
Impact
thorsten/phpmyfaq prior to 3.1.14 is vulnerable to a stored cross-site scripting attack perpetuated by an actor logged in as admin.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | thorsten/phpmyfaq | < 3.1.14 | 3.1.14 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmyfaq | Phpmyfaq | before 3.1.14 |