GHSA-2wjp-w7g7-h63qMediumCVSS 5.4

thorsten/phpmyfaq vulnerable to improper access control

Published
April 5, 2023
Last Modified
April 6, 2023

🔗 CVE IDs covered (1)

CVE-2023-1883 →

📋 Description

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to improper access control when FAQ News is marked as inactive in settings and have comments enabled, allowing comments to be posted on inactive FAQs. This has been fixed in 3.1.12.

🎯 Affected products1

  • composer/thorsten/phpmyfaq:< 3.1.12

🔗 References (4)