CVE-2022-3766

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

CVSS 7.3 HIGHEPSS 5.7%CWE-79

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

thorsten · thorsten/phpmyfaq

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/52445unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-3766.md https://github.com/thorsten/phpmyfaq/commit/c7904f2236c6c0dd64c2226b90c30af0f7e5a72d https://huntr.dev/bounties/d9666520-4ff5-43bb-aacf-50c8e5570983