Login Request a demo
PH
Product
phpMyFAQ
by phpMyFAQ · last CVE Aug 19, 2026
159
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities159In the news0Timeline
Severity mix
Critical 13High 38Medium 86Low 3
Severity
All severities159Critical13High38Medium86Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add phpMyFAQ to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-6045
7.2
2%
Aug 28
SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via vectors involving the…
Affected: before 2.8.13
CVE-2026-76210
6.5
0%
Aug 19
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
Affected: before 4.1.6
CVE-2026-24420
6.5
0%
Jan 24
phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
Affected: before 4.0.17
CVE-2026-24421
6.5
2%
Jan 24
phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user
Affected: before 4.0.17
CVE-2024-22208
6.5
1%
Feb 5
phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: before 3.2.5
CVE-2024-22202
6.5
1%
Feb 5
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: before 3.2.5
CVE-2026-32629
6.1
0%
Apr 2
phpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ Editor
Affected: before 4.1.1
CVE-2025-68951
6.1
0%
Dec 29
phpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig |raw
Affected: 4.0.14 before 4.0.16; 4.1.0
CVE-2024-28108
6.1
1%
Mar 25
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: 3.2.5
CVE-2024-24574
6.1
1%
Feb 5
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: before 3.2.5
CVE-2023-5863
6.1
1%
Oct 31
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2
Affected: before 3.2.2
CVE-2023-5320
6.1
1%
Sep 30
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18
Affected: before 3.1.18
CVE-2023-5316
6.1
0%
Sep 30
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18
Affected: before 3.1.18
CVE-2023-2999
6.1
0%
May 31
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14
Affected: before 3.1.14
CVE-2023-2998
6.1
1%
May 31
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.14
Affected: before 3.1.14
CVE-2023-1884
6.1
0%
Apr 5
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1880
6.1
2%
Apr 5
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-0314
6.1
1%
Jan 15
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10
Affected: before 3.1.10
CVE-2023-0312
6.1
1%
Jan 15
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10
Affected: before 3.1.10
CVE-2022-4407
6.1
5%
Dec 11
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9
Affected: before 3.1.9
CVE-2022-3766
6.1
6%
Oct 31
Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
Affected: before 3.1.8
CVE-2017-15809
6.1
1%
Oct 23
In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag
Affected: through 2.9.8
CVE-2017-14619
6.1
2%
Sep 20
Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the…
Affected: through 2.9.8
CVE-2017-7579
6.1
1%
Apr 7
inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field
Affected: through 2.9.6
CVE-2023-5866
5.7
0%
Oct 31
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1
Affected: before 3.2.1
CVE-2026-34974
5.4
0%
Apr 2
phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding leads to Stored XSS and Privilege Escalation
Affected: before 4.1.1
CVE-2024-28106
5.4
1%
Mar 25
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: 3.2.5
CVE-2024-27300
5.4
1%
Mar 25
phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
Affected: 3.2.5
CVE-2023-6890
5.4
0%
Dec 16
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17
Affected: before 3.1.17
CVE-2023-6889
5.4
0%
Dec 16
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17
Affected: before 3.1.17
CVE-2023-5867
5.4
0%
Oct 31
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2
Affected: before 3.2.2
CVE-2023-5319
5.4
0%
Sep 30
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18
Affected: before 3.1.18
CVE-2023-5317
5.4
0%
Sep 30
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18
Affected: before 3.1.18
CVE-2023-4007
5.4
0%
Jul 31
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16
Affected: before 3.1.16
CVE-2023-2753
5.4
1%
May 17
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta
Affected: before 3.2.0; 3.2.0
CVE-2023-2752
5.4
1%
May 17
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta
Affected: before 3.2.0; 3.2.0
CVE-2023-2428
5.4
1%
Apr 30
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13
Affected: before 3.1.13
CVE-2023-1875
5.4
0%
Apr 22
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1885
5.4
0%
Apr 5
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1883
5.4
0%
Apr 5
Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1882
5.4
1%
Apr 5
Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1879
5.4
0%
Apr 5
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1878
5.4
1%
Apr 5
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1758
5.4
1%
Apr 5
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1757
5.4
1%
Apr 5
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1756
5.4
0%
Apr 5
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1761
5.4
0%
Mar 31
Cross-site Scripting in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-1755
5.4
1%
Mar 31
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.12
Affected: before 3.1.12
CVE-2023-0794
5.4
1%
Feb 12
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11
Affected: before 3.1.11
CVE-2023-0792
5.4
1%
Feb 12
Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11
Affected: before 3.1.11
Page 2 of 4 · 159 total
1234