Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
56Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 7.3epss 5.7%
from disclosure to weapon1128 days
Published on NVDOct 31
1st PoC+1128d
exploitation probability
5.7%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
thorsten · thorsten/phpmyfaqpublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/52445unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.