Packagist/phpmyfaq/phpmyfaq CVE-2024-28106: medium 4.3, EPSS 0.54%
phpMyFAQ Stored Cross-site Scripting at FAQ News Content
Action: Upgrade phpmyfaq/phpmyfaq to 3.2.6 or later.
composer require phpmyfaq/phpmyfaq:3.2.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.5 | 3.2.6 | - |
Fixed versions
| 3.2.6 |
Sources
- osv: GHSA-6p68-36m6-392r
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6p68-36m6-392r
- https://nvd.nist.gov/vuln/detail/CVE-2024-28106
- https://github.com/thorsten/phpMyFAQ/commit/c94b3deadd87789389e1fad162bc3dd595c0e15a
- https://github.com/thorsten/phpMyFAQ
CVE-2024-28106 · published · modified · JSON