Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: thorsten phpMyFAQ 4.1.8 Clear all filters
TI-2026-58718 CVE-2026-85593 · GHSA-2xm9-x25x-7x5q

phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode

Priority LOW 23

phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerability in FaqHelper::convertOldInternalLinks() that calls html_entity_decode() on sanitized FAQ content, reversing entity-encoding protection.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-09-04 Fixed in 4.1.8 CWE-79
TI-2026-58717 CVE-2026-85592 · GHSA-447p-f6x5-rw98

phpMyFAQ before 4.1.8 Authorization Bypass via question/create

Priority MEDIUM 61

phpMyFAQ before 4.1.8 contains an authorization bypass vulnerability in the question creation endpoint where the isAddingQuestionsAllowed() method grants access to all callers when main.enableAskQuestions is enabled, ign…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0031 Published 2026-09-04 Fixed in 4.1.8 CWE-863
TI-2026-58716 CVE-2026-85591 · GHSA-p8fc-6wpx-fw6r

phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change

Priority LOW 32

phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API endpoint that allows authenticated attackers to change account passwords without verifying the current password.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00518 Published 2026-09-04 Fixed in 4.1.8 CWE-620
TI-2026-58715 CVE-2026-85590 · GHSA-x283-48fh-hc5w

phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable

Priority MEDIUM 64

phpMyFAQ before 4.1.8 contains an authentication bypass vulnerability in its two-factor authentication (TOTP) disable functionality.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00518 Published 2026-09-04 Fixed in 4.1.8 CWE-308
TI-2026-58713 CVE-2026-85588 · GHSA-prvh-6vp9-668j

phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export

Priority LOW 25

phpMyFAQ versions before 4.1.8 include live TOTP shared secrets in plaintext within user data export ZIP files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0053 Published 2026-09-04 Fixed in 4.1.8 CWE-200
TI-2026-58712 CVE-2026-85587 · GHSA-jp5x-wfgj-283r

phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pages

Priority MEDIUM 57

phpMyFAQ before 4.1.8 enforces incorrect permission checks on admin content pages, allowing lesser-privileged editors to read draft and inactive content.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00364 Published 2026-09-04 Fixed in 4.1.8 CWE-863
TI-2026-58711 CVE-2026-85586 · GHSA-m8g2-rwh5-6gg5

phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter

Priority LOW 37

phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00493 Published 2026-09-04 Fixed in 4.1.8 CWE-799