Patchfirst
Patchfirst
Chainthorsten/phpmyfaqPackagist:thorsten/phpmyfaq

thorsten/phpmyfaq: successive fixes (2022–2023)

7 CVEs over 5 generations, 19 Oct 2022 to 31 Oct 2023.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2022-360819 Oct 2022 First in the chain
  2. CVE-2023-275217 May 2023 next fix after CVE-2022-3608
  3. CVE-2023-275317 May 2023 next fix after CVE-2022-3608
  4. CVE-2023-346930 Jun 2023 next fix after CVE-2023-2752
  5. CVE-2023-586331 Oct 2023 next fix after CVE-2023-5864
  6. CVE-2023-586431 Oct 2023 next fix after CVE-2023-3469
  7. CVE-2023-586731 Oct 2023 next fix after CVE-2023-5864
Oct 2022Jan 2023MayJunJulOct CVE-2022-3608 → CVE-2023-2752: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-2753: Next fix in the same package (medium confidence)CVE-2023-2752 → CVE-2023-3469: Next fix in the same package (medium confidence)CVE-2023-3469 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5863 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5864 → CVE-2023-5867: Next fix in the same package (medium confidence) CVE-2022-3608 19 Oct 2022 CVE-2023-2752 17 May 2023 CVE-2023-2753 17 May 2023 CVE-2023-3469 30 Jun 2023 CVE-2023-5863 31 Oct 2023 CVE-2023-5864 31 Oct 2023 CVE-2023-5867 31 Oct 2023 Oct 2022Jan 2023MarMayJunJulAugSepOct CVE-2022-3608 → CVE-2023-2752: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-2753: Next fix in the same package (medium confidence)CVE-2023-2752 → CVE-2023-3469: Next fix in the same package (medium confidence)CVE-2023-3469 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5863 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5864 → CVE-2023-5867: Next fix in the same package (medium confidence) CVE-2022-3608 19 Oct 2022 CVE-2023-2752 17 May 2023 CVE-2023-2753 17 May 2023 CVE-2023-3469 30 Jun 2023 CVE-2023-5863 31 Oct 2023 CVE-2023-5864 31 Oct 2023 CVE-2023-5867 31 Oct 2023
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2022-3608 19 Oct 2022 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-alpha First in chain 18.4
CVE-2023-2752 17 May 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-beta CVE-2022-3608 · Next fix in the same package · Medium 14.1
CVE-2023-2753 17 May 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-beta CVE-2022-3608 · Next fix in the same package · Medium 14.3
CVE-2023-3469 30 Jun 2023 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq · fixed in 3.2.0-beta.2 CVE-2023-2752 · Next fix in the same package · Medium 13.1
CVE-2023-5863 31 Oct 2023 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq · fixed in 3.2.2 CVE-2023-5864 · Next fix in the same package · Medium 23.3
CVE-2023-5864 31 Oct 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.1 CVE-2023-3469 · Next fix in the same package · Medium 14.2
CVE-2023-5867 31 Oct 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.2 CVE-2023-5864 · Next fix in the same package · Medium 10.4
↑ ↓ chooseEnter openEsc close