PT-2023-32036 · Thorsten · Phpmyfaq

CVE-2023-5316

·

Publicado

2023-09-29

·

Atualizado

2023-10-02

CVSS v3.1

9.1

Crítica

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions thorsten/phpmyfaq versions prior to 3.1.18
Description The issue is related to Cross-site Scripting (XSS) - DOM, which allows an attacker to execute malicious scripts in the browser of a user. This can lead to unauthorized access to sensitive information or takeover of the user's session. The estimated number of potentially affected devices worldwide is not specified.
Recommendations For versions prior to 3.1.18, update to version 3.1.18 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-5316
GHSA-58V7-58C2-QWM9

Produtos afetados

Phpmyfaq