GHSA-xww4-w6ff-5q3gHighCVSS 8.8

thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management

Published
March 31, 2023
Last Modified
April 7, 2023

🔗 CVE IDs covered (1)

📋 Description

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12.

🎯 Affected products1

  • composer/thorsten/phpmyfaq:< 3.1.12

🔗 References (4)