{"action":"Upgrade thorsten/phpmyfaq to 3.1.17 or later.","affected":[{"fixed":"3.1.17","introduced":"0"}],"component":"thorsten/phpmyfaq","cve_ids":["CVE-2023-6889"],"ecosystem":"Packagist","epss":0.00464,"exploited":false,"fixed_versions":["3.1.17"],"ghsa_id":"GHSA-w8xj-992g-842f","id":"tcs_01M5KF9XT6BGDQEZHQWE381J6E","modified_at":"2024-02-16T08:22:35.639132Z","published_at":"2023-12-16T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-w8xj-992g-842f","https://nvd.nist.gov/vuln/detail/CVE-2023-6889","https://github.com/thorsten/phpmyfaq/commit/1037a8f012e0d9ec4bf4c8107972f6695e381392","https://github.com/thorsten/phpmyfaq","https://huntr.com/bounties/52897778-fad7-4169-bf04-a68a0646df0c"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-w8xj-992g-842f","url":"https://osv.dev/vulnerability/GHSA-w8xj-992g-842f"}],"summary":"phpMyFAQ Cross-site Scripting vulnerability"}