CVE-2022-4409: Phpmyfaq

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

Affected products

• Phpmyfaq Phpmyfaq: before 3.1.9 (fixed in 3.1.9)

Published 2022-12-11. Last modified 2026-06-17.