What is GHSA-6rj8-9cm9-6gff?

GHSA-6rj8-9cm9-6gff is a security advisory published by GitHub Security Advisories with High severity. phpMyFAQ vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-6rj8-9cm9-6gff cover?

GHSA-6rj8-9cm9-6gff covers the following CVE IDs: CVE-2022-3608. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6rj8-9cm9-6gff?

GHSA-6rj8-9cm9-6gff has a CVSS v3 base score of 8.4, published by GitHub Security Advisories.

Which products are affected by GHSA-6rj8-9cm9-6gff?

GHSA-6rj8-9cm9-6gff affects 2 products, including: composer/thorsten/phpmyfaq:\u003c= 3.1.7; composer/phpmyfaq/phpmyfaq:\u003c= 3.1.7.

GHSA-6rj8-9cm9-6gffHighCVSS 8.4

phpMyFAQ vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

October 19, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-3608 →

📋 Description

phpMyFAQ versions 3.1.7 and prior are vulnerable to stored cross-site scripting (XSS). A patch is available on the main branch of the repository and anticipated to be part of version 3.2.0-alpha.

🎯 Affected products2

composer/thorsten/phpmyfaq:<= 3.1.7
composer/phpmyfaq/phpmyfaq:<= 3.1.7

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-3608
https://github.com/thorsten/phpmyfaq/commit/37123edd50f854bd141e6fbe65221af2d5cf2677
https://huntr.dev/bounties/8f0f3635-9d81-4c55-9826-2ba955c3a850
https://github.com/advisories/GHSA-6rj8-9cm9-6gff