GHSA-pp4w-g5p4-85p2

GitHub Security Advisory

phpMyFAQ Cross-site Scripting vulnerability

✓ GitHub Reviewed CRITICAL Has CVE

Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

Packagist thorsten/phpmyfaq

Affected versions: 0 (fixed in 3.1.18)

CVE-2023-5320

GHSA ID

GHSA-pp4w-g5p4-85p2

Published

September 30, 2023 3:31 AM

Last Modified

October 2, 2023 8:22 PM

CVSS Score

9.0 /10

Primary Ecosystem

Packagist

Primary Package

thorsten/phpmyfaq

GitHub Reviewed

✓ Yes

Last updated: September 15, 2025 6:32 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.