| CVE-2024-55889 | ÉLEVÉE7.2 | phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fi | 13/12/2024 |
| CVE-2024-54141 | ÉLEVÉE7.5 | phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0. | 06/12/2024 |
| CVE-2023-6890 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17. | 16/12/2023 |
| CVE-2023-6889 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17. | 16/12/2023 |
| CVE-2023-5867 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2. | 31/10/2023 |
| CVE-2023-5866 | MOYENNE5.7 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1. | 31/10/2023 |
| CVE-2023-5865 | CRITIQUE9.8 | Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2. | 31/10/2023 |
| CVE-2023-5864 | MOYENNE4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1. | 31/10/2023 |
| CVE-2023-5863 | MOYENNE6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2. | 31/10/2023 |
| CVE-2023-5320 | MOYENNE6.1 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. | 30/09/2023 |
| CVE-2023-5319 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. | 30/09/2023 |
| CVE-2023-5317 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. | 30/09/2023 |
| CVE-2023-5316 | MOYENNE6.1 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. | 30/09/2023 |
| CVE-2023-5227 | CRITIQUE9.8 | Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8. | 30/09/2023 |
| CVE-2023-4007 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16. | 31/07/2023 |
| CVE-2023-4006 | CRITIQUE9.8 | Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16. | 31/07/2023 |
| CVE-2023-3469 | MOYENNE4.8 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2. | 30/06/2023 |
| CVE-2023-2999 | MOYENNE6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14. | 31/05/2023 |
| CVE-2023-2998 | MOYENNE6.1 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14. | 31/05/2023 |
| CVE-2023-2753 | MOYENNE5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta. | 17/05/2023 |