CVE-2023-4006

CriticalCVSS 9.8

Published: 31/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.68%

47th percentile - higher than 47% of all known CVEs

In the GitHub repository thorsten/phpmyfaq prior to version 3.1.16, there is improper neutralization of formula elements in a CSV file.

This vulnerability may lead to unauthorized formula execution, posing a risk to user data and system integrity.

It is recommended to upgrade to version 3.1.16 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.