Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-4407. PoCs published by CodeSecLab.
AI-analyzed exploit summary This is a working proof-of-concept for a reflected XSS vulnerability in phpMyFAQ 3.1.7. The exploit demonstrates how the 'action' parameter in the admin interface is unsanitized and directly rendered in an HTML attribute, allowing arbitrary JavaScript execution.
Description
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
Exploits (1)
This is a working proof-of-concept for a reflected XSS vulnerability in phpMyFAQ 3.1.7. The exploit demonstrates how the 'action' parameter in the admin interface is unsanitized and directly rendered in an HTML attribute, allowing arbitrary JavaScript execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N