Paper/Archive/CVE-2022-4407

CVE-2022-4407

thorsten thorsten/phpmyfaq — Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

EPSS 5%public exploit CVSS 9.8

critical.is priorityof 100

58

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 92.0.920 × 2018.4 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Affected

ProductAffectedFixed inSource

thorsten/phpmyfaqunspecified – < 3.1.93.1.9CNA

Scores by source

@huntrdev (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refhuntr.dev/bounties/a1649f43-78c9-4927-b313-36911872a84b refgithub.com/thorsten/phpmyfaq/commit/1d73af34bf42764f9f9491c7ba5e9495d70e3ca5 refgithub.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2022-4407.md