thorsten/phpmyfaq vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-46362Mediumphpmyfaq/phpmyfaq: phpMyFAQ has an Authorization Bypass in All Admin Pages Due to Non-Terminating Permission CheckCVE-2026-46367Highthorsten/phpmyfaq: phpMyFAQ has stored XSS via Utils::parseUrl() in comment renderingCVE-2026-34974Mediumthorsten/phpmyfaq: phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding Leads to Stored XSS and Privilege EscalationCVE-2026-34973Mediumthorsten/phpmyfaq: phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content DisclosureCVE-2026-32629Mediumthorsten/phpmyfaq: phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ EditorCVE-2026-27836Highthorsten/phpmyfaq: phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare EndpointCVE-2026-24422Mediumphpmyfaq/phpmyfaq: phpMyFAQ: Public API endpoints expose emails and invisible questionsCVE-2026-24421Mediumphpmyfaq/phpmyfaq: phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)CVE-2026-24420Mediumphpmyfaq/phpmyfaq: phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)CVE-2025-69200Highthorsten/phpmyfaq: phpMyFAQ has unauthenticated config backup download via /api/setup/backupCVE-2025-68951Mediumthorsten/phpmyfaq: phpMyFAQ has Stored XSS in user list via admin-managed display_nameCVE-2023-53929Mediumthorsten/phpmyfaq: phpMyFAQ contains a CSV injection vulnerabilityCVE-2025-62519Highthorsten/phpmyfaq: phpMyFAQ has Authenticated SQL Injection in Configuration Update FunctionalityCVE-2025-59943Highthorsten/phpmyfaq: phpMyFAQ duplicate email registration allows multiple accounts with the same emailCVE-2024-56199Mediumphpmyfaq/phpmyfaq: phpMyFAQ Vulnerable to Stored HTML Injection at FAQCVE-2024-55889Mediumthorsten/phpmyfaq: thorsten/phpmyfaq Unintended File Download Triggered by Embedded FramesCVE-2024-54141Highthorsten/phpmyfaq: phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not availableCVE-2023-6890Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-6889Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-5867Mediumthorsten/phpmyfaq: Cross-site Scripting (XSS) in thorsten/phpmyfaq CVE-2023-5865Highthorsten/phpmyfaq: Insufficient Session Expiration in thorsten/phpmyfaq CVE-2023-5866Mediumthorsten/phpmyfaq: Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaqCVE-2023-5864Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-5863Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerabilityCVE-2023-5319Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo