CVE-2024-55889 json
phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames
published 2024-12-13 22 mo ago modified 2026-09-10 1 mo ago also EUVD-2024-3486 , GHSA-m3r7-8gw7-qwvc
- cvss
- 4.9
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.2%
- EPSS 2.2% chance of exploitation in 30 days, percentile 82%
- public exploits
- 1
- Exploit-DB
Summary
phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element without user interaction or explicit consent. Version 3.2.10 fixes the issue.
Patch / fix
- packagist thorsten/phpmyfaq 3.2.10
- phpmyfaq phpmyfaq 3.2.10
Timeline
- Published
- First public exploit (EDB-52235)
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 22 mo ago
Exploit prediction
2.19% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-52235 phpMyFAQ 3.2.10 - Unintended File Download Triggered by Embedded Frames webapps, 2025-04-16
- github.com https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-m3r7-8gw7-qwvc referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
| GitHub | 3.1 | 4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N |
| NVD | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | thorsten/phpmyfaq | <3.2.10 |
3.2.10 |
Affected products
- thorsten phpMyFAQ
Classification
- Weakness
-
- CWE-451 User Interface (UI) Misrepresentation of Critical Information
References
-
github.com
/thorsten/phpMyFAQ/commit/fa0f7368dc3288eedb1915def64ef8fb270f711d
web, patch
-
github.com
/thorsten/phpMyFAQ/security/advisories/GHSA-m3r7-8gw7-qwvc
exploit, web, vendor-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2024-55889
advisory
-
github.com
/thorsten/phpMyFAQ
package
Sources
- CVE List CVE-2024-55889
- GitHub Advisory GHSA-m3r7-8gw7-qwvc
- NVD CVE-2024-55889
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.