CVE-2023-0788: 
PHP vulnerability analysis and mitigation

A Code Injection vulnerability was identified in GitHub repository thorsten/phpmyfaq versions prior to 3.1.11, tracked as CVE-2023-0788. The vulnerability was discovered and disclosed on February 12, 2023 (CVE Details).

The vulnerability was related to insufficient input sanitization in the question handling functionality of phpMyFAQ. The fix involved implementing proper sanitization by adding strip_tags() function to clean user input for questions, as evidenced in the commit (GitHub Commit).

The vulnerability could potentially allow attackers to inject malicious code through the question submission functionality, potentially compromising the security of the phpMyFAQ installation (CVE Details).

The vulnerability was reported through the huntr.dev bug bounty platform, suggesting it was discovered during security research rather than active exploitation (Huntr Report).

The vulnerability was patched in version 3.1.11 of phpMyFAQ. Users are advised to upgrade to this version or later to mitigate the risk. The fix involves adding proper input sanitization using the strip_tags() function (GitHub Commit).