High · 8.3 Scanner template CVE-2023-1880 EUVD-2023-1349GHSA-m8q9-7v2f-qjx9

Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

Published Apr 5, 2023 · Updated Feb 10, 2025 · Assigned by @huntrdev

Vendor: thorsten Product: thorsten/phpmyfaq Package: thorsten/phpmyfaq Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12.

Affected products

Vendor	Product	Affected	Fixed
thorsten	thorsten/phpmyfaq	unspecified – < 3.1.12	3.1.12

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Phpmyfaq v3.1.11 - Cross-Site Scripting http/cves/2023/CVE-2023-1880.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	thorsten/phpmyfaq	< 3.1.12	3.1.12	GHSA-m8q9-7v2f-qjx9