Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2bb7-xtyn-dbcq
Vulnerability ID VCID-2bb7-xtyn-dbcq
Aliases CVE-2023-5864
GHSA-g5hp-328h-jj98
Summary Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0009 https://api.first.org/data/v1/epss?cve=CVE-2023-5864
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-g5hp-328h-jj98
cvssv3.1 7.4 https://github.com/thorsten/phpmyfaq
generic_textual HIGH https://github.com/thorsten/phpmyfaq
cvssv3 7.4 https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
cvssv3.1 7.4 https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
generic_textual HIGH https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
ssvc Track https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
cvssv3 7.4 https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
cvssv3.1 7.4 https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
generic_textual HIGH https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
ssvc Track https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
cvssv3.1 7.4 https://nvd.nist.gov/vuln/detail/CVE-2023-5864
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-5864
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-5864
https://github.com/thorsten/phpmyfaq
https://nvd.nist.gov/vuln/detail/CVE-2023-5864
b3e5a053b59dcc072d76a55d6ce0311ea30174fa https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
e4b0e8f4-5e06-49d1-832f-5756573623ad https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
GHSA-g5hp-328h-jj98 https://github.com/advisories/GHSA-g5hp-328h-jj98
No exploits are available.
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/thorsten/phpmyfaq
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-17T13:54:56Z/ Found at https://github.com/thorsten/phpmyfaq/commit/b3e5a053b59dcc072d76a55d6ce0311ea30174fa
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-17T13:54:56Z/ Found at https://huntr.com/bounties/e4b0e8f4-5e06-49d1-832f-5756573623ad
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-5864
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.25589
EPSS Score 0.0009
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:21:45.071019+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/5xxx/CVE-2023-5864.json 38.6.0