-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHP| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| thorsten/phpmyfaq | composer | < 3.1.11 | 3.1.11 |
Miggo AIRoot Cause AnalysisThe commit diff shows two critical changes in renderOpenQuestions():
This indicates the original code:
Both patterns allow injection of arbitrary HTML/JS when user-supplied data contains payloads. The vulnerability manifests in the HTML generation logic of the open questions display feature.
Ongoing coverage of React2Shell