GHSA-xww4-w6ff-5q3gHighCVSS 8.8
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
🔗 CVE IDs covered (1)
📋 Description
thorsten/phpmyfaq prior to 3.1.12 is vulnerable to privilege escalation from improper privilege management. Any user with the ability to add a new user can create a user with super admin rights. This has been fixed in 3.1.12.
🎯 Affected products1
- composer/thorsten/phpmyfaq:< 3.1.12