CVE-2023-2753: Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Q: What is CVE-2023-2753?

CVE-2023-2753 is a vulnerability in the GitHub repository thorsten/phpmyfaq that allows for cross-site scripting (XSS) attacks.

Q: What is the severity of CVE-2023-2753?

CVE-2023-2753 has a severity rating of high, with a score of 5.4.

Q: How does CVE-2023-2753 affect phpMyFAQ?

CVE-2023-2753 affects phpMyFAQ versions prior to 3.2.0-beta, allowing for stored cross-site scripting (XSS) attacks.

Q: How can I fix CVE-2023-2753?

To fix CVE-2023-2753, you should update phpMyFAQ to version 3.2.0-beta or later.

Q: Where can I find more information about CVE-2023-2753?

You can find more information about CVE-2023-2753 at the following references: [https://github.com/thorsten/phpmyfaq/commit/5401ab75d022932b8d5d7adaa771acf44fed18ba](https://github.com/thorsten/phpmyfaq/commit/5401ab75d022932b8d5d7adaa771acf44fed18ba) and [https://huntr.dev/bounties/eca2284d-e81a-4ab8-91bb-7afeca557628](https://huntr.dev/bounties/eca2284d-e81a-4ab8-91bb-7afeca557628).

Published May 17, 2023

Updated

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

Affected Software

3 affected componentsFixes available

composer/thorsten/phpmyfaq<3.2.0-beta

3.2.0-beta

PhpMyFaq phpmyfaq<3.2.0

PhpMyFaq phpmyfaq=3.2.0-alpha

Remediation

Patch Available

https://github.com/thorsten/phpmyfaq/commit/5401ab75d022932b8d5d7adaa771acf44fed18ba

Event History

May 17, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Advisory Published

09:30 AM

Frequently Asked Questions

What is CVE-2023-2753?

CVE-2023-2753 is a vulnerability in the GitHub repository thorsten/phpmyfaq that allows for cross-site scripting (XSS) attacks.

What is the severity of CVE-2023-2753?