Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/thorsten/phpmyfaq@3.1.13
purl pkg:composer/thorsten/phpmyfaq@3.1.13
Next non-vulnerable version 4.0.18
Latest non-vulnerable version 4.1.3
Risk
Vulnerabilities affecting this package (21)
Vulnerability Summary Fixed by
VCID-1kny-sn17-gbdz
Aliases:
CVE-2023-5320
GHSA-pp4w-g5p4-85p2
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
3.1.18
Affected by 7 other vulnerabilities.
VCID-1q6p-7t7t-87e5
Aliases:
CVE-2023-5317
GHSA-5jwv-m8h3-69cg
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
3.1.18
Affected by 7 other vulnerabilities.
VCID-2bb7-xtyn-dbcq
Aliases:
CVE-2023-5864
GHSA-g5hp-328h-jj98
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.
3.2.1
Affected by 6 other vulnerabilities.
3.2.2
Affected by 2 other vulnerabilities.
VCID-2bsv-7dt5-6qcu
Aliases:
CVE-2024-55889
GHSA-m3r7-8gw7-qwvc
phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fixes the issue.
3.2.10
Affected by 2 other vulnerabilities.
VCID-2wd2-u5mg-suh4
Aliases:
CVE-2023-5867
GHSA-prrv-r843-4p75
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.
3.2.2
Affected by 2 other vulnerabilities.
VCID-6w5z-nvj8-wke8
Aliases:
CVE-2023-5865
GHSA-f728-prhw-2g68
Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.
3.2.2
Affected by 2 other vulnerabilities.
VCID-8vqk-5ha5-4bae
Aliases:
CVE-2023-2753
GHSA-vppq-6ff8-2m8w
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.
3.2.0-beta
Affected by 8 other vulnerabilities.
VCID-b64e-gffa-5kg7
Aliases:
CVE-2024-54141
GHSA-vrjr-p3xp-xx2x
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. Prior to 4.0.0, phpMyFAQ exposes the database (ie postgreSQL) server's credential when connection to DB fails. This vulnerability is fixed in 4.0.0.
4.0.0
Affected by 1 other vulnerability.
VCID-e4ep-gxfy-jbah
Aliases:
CVE-2023-5866
GHSA-34w4-wrqp-j47g
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.
3.2.1
Affected by 6 other vulnerabilities.
VCID-h2wj-7wb2-x3hz
Aliases:
CVE-2023-3469
GHSA-v6g2-jwrm-h5r5
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.
3.2.0-beta.2
Affected by 7 other vulnerabilities.
VCID-kppj-ng9a-9fhs
Aliases:
CVE-2023-6889
GHSA-w8xj-992g-842f
3.1.17
Affected by 12 other vulnerabilities.
VCID-pb65-wunz-tye6
Aliases:
CVE-2023-2999
GHSA-94r7-63g8-c4jw
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.
3.1.14
Affected by 17 other vulnerabilities.
VCID-rp5d-6b4k-33g5
Aliases:
CVE-2023-4006
GHSA-2xvx-368h-qcmv
3.1.16
Affected by 14 other vulnerabilities.
VCID-uerm-mjrz-vyg4
Aliases:
CVE-2023-5227
GHSA-qcjg-hvg6-hxcp
Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
3.1.18
Affected by 7 other vulnerabilities.
VCID-ufhy-fdmw-hkdv
Aliases:
CVE-2023-5319
GHSA-j5ww-5xf4-hqm2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
3.1.18
Affected by 7 other vulnerabilities.
VCID-wcpf-w4c4-ubba
Aliases:
CVE-2023-2752
GHSA-j657-pjgc-c4h6
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.
3.2.0-beta
Affected by 8 other vulnerabilities.
VCID-x1gz-3d4a-1qdy
Aliases:
CVE-2023-4007
GHSA-q9vm-29ph-p7mp
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.
3.1.16
Affected by 14 other vulnerabilities.
VCID-xt5z-y1n5-37fn
Aliases:
CVE-2023-5863
GHSA-j4vj-w5rj-8grw
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2.
3.2.2
Affected by 2 other vulnerabilities.
VCID-yn5s-m3hv-7be8
Aliases:
CVE-2023-2998
GHSA-974q-4vvr-vg9c
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14.
3.1.14
Affected by 17 other vulnerabilities.
VCID-z4qa-mnne-pyay
Aliases:
CVE-2023-6890
GHSA-4h37-q5j3-hw96
3.1.17
Affected by 12 other vulnerabilities.
VCID-z8kb-6u51-8bd9
Aliases:
CVE-2023-5316
GHSA-58v7-58c2-qwm9
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.
3.1.18
Affected by 7 other vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-15bx-wfer-qygk Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13. CVE-2023-2429
GHSA-r69v-q48g-3966
VCID-15yp-h3fj-pbb1 Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13. CVE-2023-2427
GHSA-5xq3-7mw9-wj5p
VCID-c229-su7g-v3dg Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. CVE-2023-2550
GHSA-5mf7-p346-7rm8
VCID-naqh-qumg-37gh Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. CVE-2023-2428
GHSA-8595-6653-96p2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:48:18.638009+00:00 GitLab Importer Affected by VCID-2bsv-7dt5-6qcu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2024-55889.yml 38.6.0
2026-06-12T19:47:55.716788+00:00 GitLab Importer Affected by VCID-b64e-gffa-5kg7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2024-54141.yml 38.6.0
2026-06-12T19:14:53.322124+00:00 GitLab Importer Affected by VCID-kppj-ng9a-9fhs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-6889.yml 38.6.0
2026-06-12T19:14:52.510370+00:00 GitLab Importer Affected by VCID-z4qa-mnne-pyay https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-6890.yml 38.6.0
2026-06-12T19:10:05.419718+00:00 GitLab Importer Affected by VCID-2wd2-u5mg-suh4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5867.yml 38.6.0
2026-06-12T19:10:04.257612+00:00 GitLab Importer Affected by VCID-6w5z-nvj8-wke8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5865.yml 38.6.0
2026-06-12T19:10:03.635737+00:00 GitLab Importer Affected by VCID-xt5z-y1n5-37fn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5863.yml 38.6.0
2026-06-12T19:10:01.937702+00:00 GitLab Importer Affected by VCID-e4ep-gxfy-jbah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5866.yml 38.6.0
2026-06-12T19:10:01.122016+00:00 GitLab Importer Affected by VCID-2bb7-xtyn-dbcq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5864.yml 38.6.0
2026-06-12T19:07:20.058337+00:00 GitLab Importer Affected by VCID-ufhy-fdmw-hkdv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5319.yml 38.6.0
2026-06-12T19:07:18.074689+00:00 GitLab Importer Affected by VCID-uerm-mjrz-vyg4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5227.yml 38.6.0
2026-06-12T19:07:17.504366+00:00 GitLab Importer Affected by VCID-z8kb-6u51-8bd9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5316.yml 38.6.0
2026-06-12T19:07:16.930730+00:00 GitLab Importer Affected by VCID-1q6p-7t7t-87e5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5317.yml 38.6.0
2026-06-12T19:07:16.347044+00:00 GitLab Importer Affected by VCID-1kny-sn17-gbdz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-5320.yml 38.6.0
2026-06-12T19:01:51.422928+00:00 GitLab Importer Affected by VCID-rp5d-6b4k-33g5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-4006.yml 38.6.0
2026-06-12T19:01:50.821646+00:00 GitLab Importer Affected by VCID-x1gz-3d4a-1qdy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-4007.yml 38.6.0
2026-06-12T18:59:03.450165+00:00 GitLab Importer Affected by VCID-h2wj-7wb2-x3hz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-3469.yml 38.6.0
2026-06-12T18:56:13.213511+00:00 GitLab Importer Affected by VCID-pb65-wunz-tye6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2999.yml 38.6.0
2026-06-12T18:56:12.632682+00:00 GitLab Importer Affected by VCID-yn5s-m3hv-7be8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2998.yml 38.6.0
2026-06-12T18:55:24.961758+00:00 GitLab Importer Affected by VCID-wcpf-w4c4-ubba https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2752.yml 38.6.0
2026-06-12T18:55:22.779749+00:00 GitLab Importer Affected by VCID-8vqk-5ha5-4bae https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2753.yml 38.6.0
2026-06-12T15:46:07.435163+00:00 GitLab Importer Fixing VCID-15yp-h3fj-pbb1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2427.yml 38.6.0
2026-06-12T15:46:07.402770+00:00 GitLab Importer Fixing VCID-c229-su7g-v3dg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2550.yml 38.6.0
2026-06-12T15:46:06.308833+00:00 GitLab Importer Fixing VCID-naqh-qumg-37gh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2428.yml 38.6.0
2026-06-12T15:46:06.277540+00:00 GitLab Importer Fixing VCID-15bx-wfer-qygk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/thorsten/phpmyfaq/CVE-2023-2429.yml 38.6.0
2026-06-12T08:00:27.681610+00:00 GithubOSV Importer Fixing VCID-c229-su7g-v3dg https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-5mf7-p346-7rm8/GHSA-5mf7-p346-7rm8.json 38.6.0
2026-06-12T08:00:25.123369+00:00 GithubOSV Importer Fixing VCID-15yp-h3fj-pbb1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-5xq3-7mw9-wj5p/GHSA-5xq3-7mw9-wj5p.json 38.6.0
2026-06-12T07:56:46.636663+00:00 GithubOSV Importer Fixing VCID-15bx-wfer-qygk https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/04/GHSA-r69v-q48g-3966/GHSA-r69v-q48g-3966.json 38.6.0
2026-06-12T07:56:35.938364+00:00 GithubOSV Importer Fixing VCID-naqh-qumg-37gh https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/04/GHSA-8595-6653-96p2/GHSA-8595-6653-96p2.json 38.6.0