Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
CVE-2023-6890

5.4MEDIUM

Key Information:

Vendor: thorsten
Status: thorsten/phpmyfaq
Vendor: CVE Published:; 16 December 2023

🔔 Create thorsten Vulnerability Alert

What is CVE-2023-6890?

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

thorsten/phpmyfaq < 3.1.17

References

https://huntr.com/bounties/2cf11678-8793-4fa1-b21a-f13556...

https://github.com/thorsten/phpmyfaq/commit/97d90ebbe11eb...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Dec 16, 2023
Vulnerability Reserved
Dec 16, 2023

Credit

Ahmed Hassan (ahmedvienna)

Josef Hassan (josefjku)

JSON

thorsten