Vulnerabilities in thorsten

118 results
Vexday analysis

Com 115 CVEs catalogadas e 24 surgidas nos últimos 90 dias, o vendor Thorsten apresenta um volume de vulnerabilidades recente que merece atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, com nenhuma entrada no CISA KEV, o que sugere menor pressão imediata de ataques em curso — embora 7 falhas de severidade crítica e 4 com PoC pública representem superfície de ataque concreta. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), indicando lacunas persistentes em validação e sanitização de entrada. A CVE mais perigosa no momento, CVE-2022-3766, registra EPSS de 0.0574, valor relativamente contido, mas que deve ser monitorado especialmente em ambientes onde atualizações não são aplicadas de forma sistemática.

CVE-2023-0791HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.6%CVE-2023-0794HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.6%CVE-2023-2753HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.6%CVE-2023-0310CRITICALCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2024-28106MEDIUMphpMyFAQ Stored XSS at FAQ News ContentEPSS 0.5%CVE-2023-2752HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-0306CRITICALCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2024-28108MEDIUMphpMyFAQ Stored HTML Injection at contentLinkEPSS 0.5%CVE-2023-1878HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1758HIGHFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaqEPSS 0.5%CVE-2023-0787HIGHCross-site Scripting (XSS) - Generic in thorsten/phpmyfaqEPSS 0.5%CVE-2023-2429MEDIUMImproper Access Control in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1882HIGHCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1757HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-5864HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1760HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2022-3765HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-2998MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-5227MEDIUMUnrestricted Upload of File with Dangerous Type in thorsten/phpmyfaqEPSS 0.5%CVE-2023-0314MEDIUMCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqEPSS 0.5%