~ / search / GHSA-gx43-fqrx-6fcw

GHSA-gx43-fqrx-6fcw

thorsten/phpmyfaq vulnerable to business logic errors

Source: GitHub Advisory Database (reviewed) High CVE-2023-1887

Packages

EcosystemPackageAffectedFixed in
Packagist thorsten/phpmyfaq < 3.1.12 3.1.12

Details

As written in the advisory (Markdown source, shown as plain text).

thorsten/phpmyfaq prior to 3.1.12 allows users with edit-only permissions to add and delete categories and add FAQs. This has been fixed in 3.1.12.

References

External links from the advisory. They lead to third-party sites.