Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
phpMyFAQ User Interface (UI) Misrepresentation of Critical Information Vulnerability - CVE-2024-55889 - Vulnerability Database
phpMyFAQ

phpMyFAQ User Interface (UI) Misrepresentation of Critical Information Vulnerability - CVE-2024-55889

High
Reference: CVE-2024-55889
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-55889
Title: phpMyFAQ User Interface (UI) Misrepresentation of Critical Information Vulnerability
Overview:

phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10 a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim39s machine upon page visit by embedding it in an ltiframegt element without user interaction or explicit consent. Version 3.2.10 fixes the issue.