Description

Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

Remediation

References

CVE-2023-0789

Related Vulnerabilities

WordPress Plugin Real Estate Website Builder 'ajax_action' Parameter Cross-Site Scripting (0.1.0)

WordPress Plugin WoWPth Cross-Site Scripting (2.0)

WordPress Plugin WP Easy Gallery 'select_gallery' Parameter Cross-Site Scripting (1.7)

WordPress Plugin Ninja Forms with File Uploads Extension Cross-Site Scripting (3.3.12)

WordPress Plugin MainWP Child-Securely connects sites to the MainWP WordPress Manager Dashboard Security Bypass (3.4.4)

Severity

Critical

Classification

CVE-2023-0789 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities