CVE-2023-3469

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.2.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
thorsten	thorsten/phpmyfaq	>= unspecified, < 3.2.0-beta.2
phpmyfaq	phpmyfaq	< 3.2.0-beta.2

References

https://github.com/thorsten/phpmyfaq/commit/04a0183c25dd425f4c2bfb5f75b7650b932ae278Patch
https://huntr.dev/bounties/3565cfc9-82c4-4db8-9b8f-494dd81b56caExploit, Patch, Third Party Advisory
https://github.com/thorsten/phpmyfaq/commit/04a0183c25dd425f4c2bfb5f75b7650b932ae278Patch
https://huntr.dev/bounties/3565cfc9-82c4-4db8-9b8f-494dd81b56caExploit, Patch, Third Party Advisory

Timeline

Published: Jun 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-34706.1Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictab CVE-2023-34717.8Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.CVE-2023-34727.8Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.CVE-2023-347237.5An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information via /config/system.c CVE-2023-347246.8An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via the UART CVE-2023-347256.8An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via a telnet CVE-2023-34739.8A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function CVE-2023-347325.4An issue in the userId parameter in the change password function of Flytxt NEON-dX v0.0.1-SNAPSHOT-6.9-qa-2-9-g5502a0c allows attackers to e CVE-2023-347336.8A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial o CVE-2023-347344.8Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) .CVE-2023-347359.8Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection.CVE-2023-347367.2Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload.