phpMyFAQ

📝 CMS Related 38

slug: phpmyfaq

No explanation yet for this tag.

🔖 Related tags

WordPress5433 Drupal150 Joomla81 Magento75 Strapi8 TYPO35 Shopware3 Ghost2

🛡 Vulnerabilities tagged with this 38

ID	Title	Severity	Detected
CVE-2026-76215	phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child...	Medium	1 month ago
CVE-2026-76214	phpMyFAQ before 4.1.7 (affected versions <= 4.1.5) fails to persist the WebAuthn login challenge...	High	1 month ago
CVE-2026-76213	phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step...	High	1 month ago
CVE-2026-76212	phpMyFAQ before 4.1.7, when configured to use PostgreSQL via the native pgsql PHP extension,...	Medium	1 month ago
CVE-2026-76211	phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATION_EDIT permission on admin API read...	Medium	1 month ago
CVE-2026-76210	phpMyFAQ before 4.1.7 does not adequately sanitize HTML in FAQ answers before generating PDFs via...	Medium	1 month ago
CVE-2026-76209	phpMyFAQ versions before v4.1.6 fail to validate the security.enableRegistration setting in API...	Medium	1 month ago
CVE-2026-76208	phpMyFAQ versions 3.1.0 through 4.1.6 contain an authentication bypass vulnerability in AuthLdap:...	High	1 month ago
CVE-2026-76207	phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me...	High	1 month ago
CVE-2026-76205	phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update...	High	1 month ago
CVE-2026-76206	phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint,...	Medium	1 month ago
CVE-2026-75920	phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at...	Medium	1 month ago
CVE-2026-75919	phpMyFAQ before 4.1.7 contains an authentication bypass vulnerability in SetupController that...	Medium	1 month ago
CVE-2026-75918	phpMyFAQ before 4.1.7 stores password reset tokens in a publicly accessible tracking file when...	High	1 month ago
CVE-2026-46367	Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering	High	5 months ago
CVE-2026-46359	phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields	High	5 months ago
CVE-2026-46366	phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query	High	5 months ago
CVE-2026-34973	phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in…	Medium	6 months ago
CVE-2026-34974	phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the regex-based SVG sanitizer in phpMyFAQ…	Medium	6 months ago
CVE-2025-68951	Cross-Site Scripting (XSS) in phpMyFAQ (CVE-2025-68951)	Medium	9 months ago
CVE-2025-69200	Vulnerability in phpMyFAQ (CVE-2025-69200)	High	9 months ago
CVE-2025-62519	phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability…	High	10 months ago
CVE-2025-59943	Vulnerability in phpMyFAQ (CVE-2025-59943)	High	1 year ago
CVE-2017-15809	In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.	Medium	8 years ago
CVE-2017-15808	In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.	High	8 years ago
CVE-2017-15735	In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.	High	8 years ago
CVE-2017-15734	In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.	High	8 years ago
CVE-2017-15733	In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and…	High	8 years ago
CVE-2017-15732	In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.	High	8 years ago
CVE-2017-15731	In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.	High	8 years ago