CVE-2022-4407

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

CVSS 9.8 CRITICALEPSS 4.4%CWE-79

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

thorsten · thorsten/phpmyfaq

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/52226unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-4407.md https://github.com/thorsten/phpmyfaq/commit/1d73af34bf42764f9f9491c7ba5e9495d70e3ca5 https://huntr.dev/bounties/a1649f43-78c9-4927-b313-36911872a84b