-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| thorsten/phpmyfaq | composer | < 2.9.11 | 2.9.11 |
PHPPHPMiggo AIRoot Cause AnalysisCSRF vulnerabilities in admin interfaces typically occur in state-changing operations that lack anti-CSRF token validation(). The advisory explicitly mentions admin-privileged CSRF and report generation flaws, indicating unprotected admin endpoints. While exact function names aren't provided in available resources, the pattern of vulnerability (missing CSRF checks in admin actions) and phpMyFAQ's architecture suggest these handlers in admin/*.php files were vulnerable. Confidence is medium due to lack of direct code references, but aligns with CSRF vulnerability patterns and advisory context.
Ongoing coverage of React2Shell