CVE-2023-0786

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Feb 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-07875.4Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07889.8Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07899.8Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07908.8Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07915.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07925.4Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07938.8Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07945.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.CVE-2023-07955.5LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted CVE-2023-07965.5LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted CVE-2023-07975.5LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, aCVE-2023-07985.5LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted
CVE-2023-0786: Medium severity, CVSS 4.8 | Vulnix