thorsten/phpmyfaq vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-24421Mediumphpmyfaq/phpmyfaq: phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)CVE-2026-24420Mediumphpmyfaq/phpmyfaq: phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)CVE-2025-69200Highthorsten/phpmyfaq: phpMyFAQ has unauthenticated config backup download via /api/setup/backup CVE-2025-68951Mediumthorsten/phpmyfaq: phpMyFAQ has Stored XSS in user list via admin-managed display_name CVE-2023-53929Mediumthorsten/phpmyfaq: phpMyFAQ contains a CSV injection vulnerability CVE-2025-62519Highthorsten/phpmyfaq: phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality CVE-2025-59943Highthorsten/phpmyfaq: phpMyFAQ duplicate email registration allows multiple accounts with the same email CVE-2024-56199Mediumphpmyfaq/phpmyfaq: phpMyFAQ Vulnerable to Stored HTML Injection at FAQ CVE-2024-55889Mediumthorsten/phpmyfaq: thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames CVE-2024-54141Highthorsten/phpmyfaq: phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available CVE-2023-6890Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-6889Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5867Mediumthorsten/phpmyfaq: Cross-site Scripting (XSS) in thorsten/phpmyfaq CVE-2023-5865Highthorsten/phpmyfaq: Insufficient Session Expiration in thorsten/phpmyfaq CVE-2023-5866Mediumthorsten/phpmyfaq: Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq CVE-2023-5864Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5863Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5319Highthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5320Criticalthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5317Mediumthorsten/phpmyfaq: phpMyFaq Cross-site Scripting vulnerability CVE-2023-5316Criticalthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting vulnerability CVE-2023-5227Mediumthorsten/phpmyfaq: phpMyFAQ allows unrestricted file types in image field CVE-2023-4006Highthorsten/phpmyfaq: phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability CVE-2023-4007Highthorsten/phpmyfaq: phpMyFAQ Stored Cross-site Scripting vulnerability CVE-2023-3469Mediumthorsten/phpmyfaq: phpMyFAQ Cross-site Scripting

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo