PatchTheCVEarphp vulnerabilities and fixes
Recent CVEs affecting arphp, with upgrade or downgrade steps. 1 tracked.
arphp has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-05-04. Highest priority: CVE-2022-28081 (score 33/100).
- CVE-2022-28081 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0 allows attacke
FAQ
How do I fix arphp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is arphp being exploited right now?
None of the tracked arphp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which arphp CVE should I patch first?
CVE-2022-28081 currently ranks highest (33/100): A reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0 allows attacke.