Patchfirst
Patchfirst
Chainthorsten/phpmyfaqPackagist:thorsten/phpmyfaq

thorsten/phpmyfaq: successive fixes (2022–2023)

11 CVEs over 5 generations, 19 Oct 2022 to 16 Dec 2023.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2022-360819 Oct 2022 First in the chain
  2. CVE-2023-275217 May 2023 next fix after CVE-2022-3608
  3. CVE-2023-275317 May 2023 next fix after CVE-2022-3608related to CVE-2023-2752
  4. CVE-2023-299831 May 2023 No direct link to an earlier CVE
  5. CVE-2023-346930 Jun 2023 related to CVE-2022-3608next fix after CVE-2023-2752
  6. CVE-2023-400731 Jul 2023 next fix after CVE-2023-2998
  7. CVE-2023-586331 Oct 2023 next fix after CVE-2023-5864
  8. CVE-2023-586431 Oct 2023 next fix after CVE-2023-3469
  9. CVE-2023-586731 Oct 2023 next fix after CVE-2023-5864
  10. CVE-2023-688916 Dec 2023 next fix after CVE-2023-4007
  11. CVE-2023-689016 Dec 2023 related to CVE-2023-2752related to CVE-2023-2753and 1 more
Oct 2022Jan 2023MayJunJulAugOctNovDec CVE-2022-3608 → CVE-2023-2752: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-2753: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-3469: related (medium confidence)CVE-2023-2752 → CVE-2023-2753: related (medium confidence)CVE-2023-2752 → CVE-2023-3469: Next fix in the same package (medium confidence)CVE-2023-2752 → CVE-2023-6890: related (medium confidence)CVE-2023-2753 → CVE-2023-6890: related (medium confidence)CVE-2023-2998 → CVE-2023-4007: Next fix in the same package (medium confidence)CVE-2023-3469 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-4007 → CVE-2023-6889: Next fix in the same package (medium confidence)CVE-2023-4007 → CVE-2023-6890: Next fix in the same package (medium confidence)CVE-2023-5863 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5864 → CVE-2023-5867: Next fix in the same package (medium confidence) CVE-2022-3608 19 Oct 2022 CVE-2023-2752 17 May 2023 CVE-2023-2753 17 May 2023 CVE-2023-2998 31 May 2023 CVE-2023-3469 30 Jun 2023 CVE-2023-4007 31 Jul 2023 CVE-2023-5863 31 Oct 2023 CVE-2023-5864 31 Oct 2023 CVE-2023-5867 31 Oct 2023 CVE-2023-6889 16 Dec 2023 CVE-2023-6890 16 Dec 2023 Oct 2022Jan 2023MarMayJunJulAugSepOctNovDec CVE-2022-3608 → CVE-2023-2752: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-2753: Next fix in the same package (medium confidence)CVE-2022-3608 → CVE-2023-3469: related (medium confidence)CVE-2023-2752 → CVE-2023-2753: related (medium confidence)CVE-2023-2752 → CVE-2023-3469: Next fix in the same package (medium confidence)CVE-2023-2752 → CVE-2023-6890: related (medium confidence)CVE-2023-2753 → CVE-2023-6890: related (medium confidence)CVE-2023-2998 → CVE-2023-4007: Next fix in the same package (medium confidence)CVE-2023-3469 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-4007 → CVE-2023-6889: Next fix in the same package (medium confidence)CVE-2023-4007 → CVE-2023-6890: Next fix in the same package (medium confidence)CVE-2023-5863 → CVE-2023-5864: Next fix in the same package (medium confidence)CVE-2023-5864 → CVE-2023-5867: Next fix in the same package (medium confidence) CVE-2022-3608 19 Oct 2022 CVE-2023-2752 17 May 2023 CVE-2023-2753 17 May 2023 CVE-2023-2998 31 May 2023 CVE-2023-3469 30 Jun 2023 CVE-2023-4007 31 Jul 2023 CVE-2023-5863 31 Oct 2023 CVE-2023-5864 31 Oct 2023 CVE-2023-5867 31 Oct 2023 CVE-2023-6889 16 Dec 2023 CVE-2023-6890 16 Dec 2023
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2022-3608 19 Oct 2022 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-alpha First in chain 18.4
CVE-2023-2752 17 May 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-beta CVE-2022-3608 · Next fix in the same package · Medium 14.1
CVE-2023-2753 17 May 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.0-beta CVE-2022-3608 · Next fix in the same package · Medium 14.3
CVE-2023-2998 31 May 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.1.14 First in chain 13.1
CVE-2023-3469 30 Jun 2023 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq · fixed in 3.2.0-beta.2 CVE-2022-3608 · related · Medium 13.1
CVE-2023-4007 31 Jul 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.1.16 CVE-2023-2998 · Next fix in the same package · Medium 14.6
CVE-2023-5863 31 Oct 2023 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq · fixed in 3.2.2 CVE-2023-5864 · Next fix in the same package · Medium 23.3
CVE-2023-5864 31 Oct 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.1 CVE-2023-3469 · Next fix in the same package · Medium 14.2
CVE-2023-5867 31 Oct 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.2.2 CVE-2023-5864 · Next fix in the same package · Medium 10.4
CVE-2023-6889 16 Dec 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.1.17 CVE-2023-4007 · Next fix in the same package · Medium 11.8
CVE-2023-6890 16 Dec 2023 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq · fixed in 3.1.17 CVE-2023-2752 · related · Medium 11.8
↑ ↓ chooseEnter openEsc close