thorsten
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 58
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, thorsten recorded 58 security vulnerabilities in the last 90 days across 1 products, including 32 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, phpMyFAQ had the most security vulnerabilities in the thorsten ecosystem, with 58 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-28107phpMyFAQ SQL injections at insertentry & saveentryCVE-2024-28106phpMyFAQ Stored XSS at FAQ News ContentCVE-2024-28105phpMyFAQ's File Upload Bypass at Category Image Leads to RCECVE-2024-27300phpMyFAQ Stored XSS at user emailCVE-2024-27299phpMyFAQ SQL Injection at "Save News"| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-28107phpMyFAQ SQL injections at insertentry & saveentry | Exploitation statusNot exploited | FixYes |
| Published03/25/2024 |
| SeverityHigh |
CVE-2024-28106phpMyFAQ Stored XSS at FAQ News Content | Exploitation statusActively exploited | FixYes | Affected productphpMyFAQ | Published03/25/2024 | SeverityMedium |
|---|
CVE-2024-28105phpMyFAQ's File Upload Bypass at Category Image Leads to RCE | Exploitation statusActively exploited | FixYes | Affected productphpMyFAQ | Published03/25/2024 | SeverityHigh |
|---|
CVE-2024-27300phpMyFAQ Stored XSS at user email | Exploitation statusActively exploited | FixYes | Affected productphpMyFAQ | Published03/25/2024 | SeverityMedium |
|---|
CVE-2024-27299phpMyFAQ SQL Injection at "Save News" | Exploitation statusNot exploited | FixYes | Affected productphpMyFAQ | Published03/25/2024 | SeverityHigh |
|---|
CVE-2024-24574phpMyFAQ vulnerable to stored XSS on attachments filename | Exploitation statusActively exploited | FixYes | Affected productphpMyFAQ | Published02/05/2024 | SeverityMedium |
|---|
CVE-2024-22208phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes | Exploitation statusActively exploited | FixYes | Affected productphpMyFAQ | Published02/05/2024 | SeverityMedium |
|---|
CVE-2024-22202User Removal Page Allows Spoofing Of User Details | Exploitation statusNot exploited | FixYes | Affected productphpMyFAQ | Published02/05/2024 | SeverityMedium |
|---|
CVE-2023-6890Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot confirmed | FixYes | Affected productthorsten/phpmyfaq | Published12/16/2023 | SeverityMedium |
|---|
CVE-2023-6889Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot confirmed | FixYes | Affected productthorsten/phpmyfaq | Published12/16/2023 | SeverityMedium |
|---|
CVE-2023-5867Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published10/31/2023 | SeverityMedium |
|---|
CVE-2023-5866Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published10/31/2023 | SeverityMedium |
|---|
CVE-2023-5865Insufficient Session Expiration in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published10/31/2023 | SeverityHigh |
|---|
CVE-2023-5864Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published10/31/2023 | SeverityHigh |
|---|
CVE-2023-5863Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published10/31/2023 | SeverityHigh |
|---|
CVE-2023-5320Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published09/30/2023 | SeverityCritical |
|---|
CVE-2023-5319Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published09/30/2023 | SeverityHigh |
|---|
CVE-2023-5317Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published09/30/2023 | SeverityMedium |
|---|
CVE-2023-5316Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published09/30/2023 | SeverityCritical |
|---|
CVE-2023-5227Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published09/30/2023 | SeverityMedium |
|---|
CVE-2023-4007Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published07/31/2023 | SeverityHigh |
|---|
CVE-2023-4006Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published07/31/2023 | SeverityHigh |
|---|
CVE-2023-3469Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published06/30/2023 | SeverityMedium |
|---|
CVE-2023-2999Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/31/2023 | SeverityMedium |
|---|
CVE-2023-2998Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/31/2023 | SeverityMedium |
|---|
CVE-2023-2753Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/17/2023 | SeverityHigh |
|---|
CVE-2023-2752Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/17/2023 | SeverityHigh |
|---|
CVE-2023-2550Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/05/2023 | SeverityHigh |
|---|
CVE-2023-2427Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published05/05/2023 | SeverityMedium |
|---|
CVE-2023-2429Improper Access Control in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/30/2023 | SeverityMedium |
|---|
CVE-2023-2428Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/30/2023 | SeverityMedium |
|---|
CVE-2023-1875Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/22/2023 | SeverityMedium |
|---|
CVE-2023-1887Business Logic Errors in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1886Authentication Bypass by Capture-replay in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1885Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-1884Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-1883Improper Access Control in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-1882Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1880Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1879Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-1878Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1758Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1757Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityHigh |
|---|
CVE-2023-1756Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published04/05/2023 | SeverityMedium |
|---|
CVE-2023-1762Improper Privilege Management in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityHigh |
|---|
CVE-2023-1761Cross-site Scripting in thorsten/phpmyfaq | Exploitation statusNot exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityMedium |
|---|
CVE-2023-1760Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityHigh |
|---|
CVE-2023-1759Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityMedium |
|---|
CVE-2023-1755Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityHigh |
|---|
CVE-2023-1754Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq | Exploitation statusActively exploited | FixYes | Affected productthorsten/phpmyfaq | Published03/31/2023 | SeverityMedium |
|---|
176 Results | Page 3 of 4