Lucene search

@huntrdevCVE-2022-3766

HistoryOct 31, 2022 - 11:15 a.m.

CVE-2022-3766

2022-10-3111:15:10

CWE-79

@huntrdev

web.nvd.nist.gov

cve-2022-3766

cross-site scripting

xss

github

repository

thorsten

phpmyfaq

nvd

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

30.0%

JSON

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

Affected configurations

Nvd

Node

phpmyfaqphpmyfaqRange<3.1.8

VendorProductVersionCPE
phpmyfaqphpmyfaq*cpe:2.3:a:phpmyfaq:phpmyfaq:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
phpmyfaq	phpmyfaq	*	cpe:2.3:a:phpmyfaq:phpmyfaq::::::::

CNA Affected

[
  {
    "vendor": "thorsten",
    "product": "thorsten/phpmyfaq",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.1.8",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/thorsten/phpmyfaq/commit/c7904f2236c6c0dd64c2226b90c30af0f7e5a72d

huntr.dev/bounties/d9666520-4ff5-43bb-aacf-50c8e5570983

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

30.0%

JSON

Related for CVE-2022-3766