{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.2.10","last_affected":"4.0.1"}],"component":"thorsten/phpmyfaq","cve_ids":["CVE-2024-56199"],"ecosystem":"Packagist","epss":0.00428,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-ww33-jppq-qfrp","id":"tcs_01M5KFADC2W2EG0CEWBVDT6CTZ","modified_at":"2025-08-14T20:06:10.972950Z","published_at":"2025-01-02T22:43:40Z","references":["https://osv.dev/vulnerability/GHSA-ww33-jppq-qfrp","https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-ww33-jppq-qfrp","https://nvd.nist.gov/vuln/detail/CVE-2024-56199","https://github.com/thorsten/phpMyFAQ"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-ww33-jppq-qfrp#Packagist/thorsten/phpmyfaq","url":"https://osv.dev/vulnerability/GHSA-ww33-jppq-qfrp"}],"summary":"phpMyFAQ Vulnerable to Stored HTML Injection at FAQ"}