Login Request a demo
PH
Vendor
phpMyFAQ
1 product with CVEs on record
159
CVEs
0
On KEV
0
New 30D
Products
PH
phpMyFAQ
phpMyFAQ
9.8
159 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-76215
PH
Phpmyfaq
Phpmyfaq
5.3
0%
Aug 19phpMyFAQ before 4.1.7 Missing Authorization via child resources
CVE-2026-76214
PH
Phpmyfaq
Phpmyfaq
7.4
0%
Aug 19phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
CVE-2026-76213
PH
Phpmyfaq
Phpmyfaq
7.4
0%
Aug 19phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
CVE-2026-76212
PH
Phpmyfaq
Phpmyfaq
5.3
0%
Aug 19phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQL
CVE-2026-76211
PH
Phpmyfaq
Phpmyfaq
4.3
0%
Aug 19phpMyFAQ before 4.1.7 Information Disclosure via Admin API
CVE-2026-76210
PH
Phpmyfaq
Phpmyfaq
6.5
0%
Aug 19phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
CVE-2026-76209
PH
Phpmyfaq
Phpmyfaq
4.3
0%
Aug 19phpMyFAQ before v4.1.6 Registration Bypass via API
CVE-2026-76208
PH
Phpmyfaq
Phpmyfaq
8.2
0%
Aug 19phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP
CVE-2026-76207
PH
Phpmyfaq
Phpmyfaq
8.1
0%
Aug 19phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
CVE-2026-76206
PH
Phpmyfaq
Phpmyfaq
5.3
0%
Aug 19phpMyFAQ before 4.1.7 Information Disclosure via PDF Export
CVE-2026-76205
PH
Phpmyfaq
Phpmyfaq
8.1
0%
Aug 19phpMyFAQ before 4.1.7 SQL Injection via Glossary
CVE-2026-75920
PH
Phpmyfaq
Phpmyfaq
5.3
0%
Aug 19phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIP
CVE-2026-75919
PH
Phpmyfaq
Phpmyfaq
5.3
1%
Aug 19phpMyFAQ before 4.1.7 Authentication Bypass via Setup API
CVE-2026-75918
PH
Phpmyfaq
Phpmyfaq
8.8
0%
Aug 19phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
CVE-2026-57996
PH
phpMyFAQ
phpMyFAQ
8.8
0%
Jul 15phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint
CVE-2026-57994
PH
phpMyFAQ
phpMyFAQ
5.3
0%
Jul 10phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints
CVE-2026-57961
PH
phpMyFAQ
phpMyFAQ
2.7
0%
Jul 10phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Function
CVE-2026-57995
PH
phpMyFAQ
phpMyFAQ
8.8
0%
Jun 30phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions
CVE-2026-56396
PH
phpMyFAQ
phpMyFAQ
8.8
0%
Jun 21phpMyFAQ - Privilege Escalation via Missing Authorization in editUser() and updateUserRights()
CVE-2026-34974
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Apr 2phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding leads to Stored XSS and Privilege Escalation
CVE-2026-34973
PH
Phpmyfaq
Phpmyfaq
5.3
0%
Apr 2phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content Disclosure
CVE-2026-34729
PH
Phpmyfaq
Phpmyfaq
4.8
0%
Apr 2phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes()
CVE-2026-34728
PH
Phpmyfaq
Phpmyfaq
8.1
1%
Apr 2phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController
CVE-2026-32629
PH
Phpmyfaq
Phpmyfaq
6.1
0%
Apr 2phpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ Editor
CVE-2026-27836
PH
Phpmyfaq
Phpmyfaq
7.5
0%
Feb 27phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint
CVE-2026-24422
PH
Phpmyfaq
Phpmyfaq
7.5
0%
Jan 24phpMyFAQ: Public API endpoints expose emails and invisible questions
CVE-2026-24420
PH
Phpmyfaq
Phpmyfaq
6.5
0%
Jan 24phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
CVE-2026-24421
PH
Phpmyfaq
Phpmyfaq
6.5
2%
Jan 24phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user
CVE-2025-69200
PH
Phpmyfaq
Phpmyfaq
7.5
2%
Dec 29phpMyFAQ is an open source FAQ web application
CVE-2025-68951
PH
Phpmyfaq
Phpmyfaq
6.1
0%
Dec 29phpMyFAQ is an open source FAQ web application
CVE-2023-53929
PH
Phpmyfaq
Phpmyfaq
8.0
1%
Dec 17phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names
CVE-2025-62519
PH
Phpmyfaq
Phpmyfaq
7.2
1%
Nov 17phpMyFAQ is an open source FAQ web application
CVE-2025-59943
PH
Phpmyfaq
Phpmyfaq
9.8
0%
Oct 3phpMyFAQ is an open source FAQ web application
CVE-2024-56199
PH
Phpmyfaq
Phpmyfaq
7.6
0%
Jan 2phpMyFAQ Vulnerable to Stored HTML Injection at FAQ
CVE-2024-55889
PH
Phpmyfaq
Phpmyfaq
7.2
2%
Dec 13phpMyFAQ is an open source FAQ web application
CVE-2024-54141
PH
Phpmyfaq
Phpmyfaq
7.5
0%
Dec 6phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-29196
PH
Phpmyfaq
Phpmyfaq
2.7
1%
Mar 26phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-29179
PH
Phpmyfaq
Phpmyfaq
4.8
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-28108
PH
Phpmyfaq
Phpmyfaq
6.1
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-28107
PH
Phpmyfaq
Phpmyfaq
8.8
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-28106
PH
Phpmyfaq
Phpmyfaq
5.4
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-28105
PH
Phpmyfaq
Phpmyfaq
7.2
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-27300
PH
Phpmyfaq
Phpmyfaq
5.4
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-27299
PH
Phpmyfaq
Phpmyfaq
8.8
1%
Mar 25phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-24574
PH
Phpmyfaq
Phpmyfaq
6.1
1%
Feb 5phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-22208
PH
Phpmyfaq
Phpmyfaq
6.5
1%
Feb 5phpMyFAQ is an Open Source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2024-22202
PH
Phpmyfaq
Phpmyfaq
6.5
1%
Feb 5phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases
CVE-2023-6890
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Dec 16Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17
CVE-2023-6889
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Dec 16Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17
CVE-2023-5867
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Oct 31Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2
CVE-2023-5866
PH
Phpmyfaq
Phpmyfaq
5.7
0%
Oct 31Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1
CVE-2023-5865
PH
Phpmyfaq
Phpmyfaq
9.8
1%
Oct 31Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2
CVE-2023-5864
PH
Phpmyfaq
Phpmyfaq
4.8
1%
Oct 31Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.1
CVE-2023-5863
PH
Phpmyfaq
Phpmyfaq
6.1
1%
Oct 31Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.2.2
CVE-2023-5320
PH
Phpmyfaq
Phpmyfaq
6.1
1%
Sep 30Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18
CVE-2023-5319
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Sep 30Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18
CVE-2023-5317
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Sep 30Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18
CVE-2023-5316
PH
Phpmyfaq
Phpmyfaq
6.1
0%
Sep 30Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18
CVE-2023-5227
PH
Phpmyfaq
Phpmyfaq
9.8
1%
Sep 30Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8
CVE-2023-4007
PH
Phpmyfaq
Phpmyfaq
5.4
0%
Jul 31Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16