CVE-2022-3608
published 2022-10-19CVE-2022-3608: Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.
PriorityP431high8.4CVSS 3.1
AVNACLPRHUIRSCCHIHAH
EPSS
0.92%
55.7th percentile
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| phpmyfaq | phpmyfaq | <= 3.1.7 | — |
| phpmyfaq | phpmyfaq | >= 0 < 3.2.0-alpha | 3.2.0-alpha |
| thorsten | phpmyfaq | >= 0 < 3.2.0-alpha | 3.2.0-alpha |
| thorsten | thorsten_phpmyfaq | >= unspecified < 3.2.0-alpha | 3.2.0-alpha |
CVSS provenance
nvdv3.18.4HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
nvdv3.07.2HIGHCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
phpMyFAQ vulnerable to Cross-site Scripting
osv·2022-10-19
CVE-2022-3608 [HIGH] phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the `main` branch of the repository and anticipated to be part of version 3.2.0-alpha.
GHSA
phpMyFAQ vulnerable to Cross-site Scripting
ghsa·2022-10-19
CVE-2022-3608 [HIGH] CWE-79 phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ vulnerable to Cross-site Scripting
phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the `main` branch of the repository and anticipated to be part of version 3.2.0-alpha.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-19
Published