phpmyfaq/phpmyfaq (Packagist)
Advisories
60
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 4.2.0-alpha or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require phpmyfaq/phpmyfaq:^4.2.0-alphaKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-rw77-vq4g-x3hp phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion |
High EPSS 0.26% |
< 4.1.6 | 4.1.6 |
| GHSA-8gpw-xvpf-hvx5 phpMyFAQ's two-factor authentication login bypasses the password factor |
High EPSS 0.53% |
>= 3.2.0, < 4.1.6 | 4.1.6 |
| GHSA-pgwp-vc7q-cvj3 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission |
High EPSS 0.24% |
< 4.2.0-alpha | 4.2.0-alpha |
| GHSA-mf8r-wm2w-f8c5 phpMyFAQ public FAQ APIs expose inactive FAQ content |
Medium EPSS 0.36% |
>= 4.1.0, < 4.1.5 | 4.1.5 |
| GHSA-88g4-74f3-63x9 phpMyFAQ has Potential Authenticated Path Traversal in PDF Export |
Medium EPSS 0.40% |
>= 4.0.0-alpha, < 4.1.5 | 4.1.5 |
| GHSA-pg62-f8g4-4wqh phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold |
High EPSS 0.44% |
< 4.1.5 | 4.1.5 |
| GHSA-985r-q3qp-299h phpMyFAQ has an incomplete fix for GHSA-xvp4-phqj-cjr3 — editUser() and updateUserRights() lack authorization guards |
High EPSS 0.44% |
< 4.1.4 | 4.1.4 |
| GHSA-8c6h-7g6x-m5x4 phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix) |
Medium EPSS 0.39% |
< 4.1.4 | 4.1.4 |
| GHSA-58fg-62fg-3fcj phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing |
Low EPSS 0.18% |
< 4.1.4 | 4.1.4 |
| GHSA-w9xh-5f39-vq89 phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration |
High EPSS 0.42% |
< 4.1.3 | 4.1.3 |
| GHSA-gp95-j463-vv28 phpMyFAQ: Default Empty API Token Authentication Bypass |
High EPSS 0.48% |
< 4.1.3 | 4.1.3 |
| GHSA-xvp4-phqj-cjr3 phpMyFAQ: IDOR Account Takeover |
High EPSS 0.38% |
< 4.1.3 | 4.1.3 |
| GHSA-9qv9-8xv6-5p35 phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation |
High EPSS 0.30% |
< 4.1.3 | 4.1.3 |
| GHSA-rmqr-h98c-qg2m Duplicate Advisory: phpMyFAQ: Path traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-478m-mrw4-qf2w Duplicate Advisory: phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-5h62-f8fg-4w7q Duplicate Advisory: phpMyFAQ: Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-6626-79jh-5ccr Duplicate Advisory: phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id Withdrawn |
Critical | < 4.1.2 | 4.1.2 |
| GHSA-9r8r-x3vg-6xh4 Duplicate Advisory: phpMyFAQ: Ordinary Authenticated User Can Access Admin-Only API Endpoints Due to Insufficient Authorization Check Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-ch9q-c9mp-j5gq Duplicate Advisory: phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha Withdrawn |
Critical | < 4.1.2 | 4.1.2 |
| GHSA-cqrw-j4qc-7f9w Duplicate Advisory: phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-p9wc-4pjv-rg82 Duplicate Advisory: phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-h36g-93qx-rxgr Duplicate Advisory: phpMyFAQ: Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-p26v-fx3x-r2rp Duplicate Advisory: phpMyFAQ's Missing CONFIGURATION_EDIT Permission Check on 12 Admin API Configuration Tab Endpoints Allows Information Disclosure by Any Authenticated User Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-w42g-jj8w-fj77 Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-w9mj-gfrm-hj5x Duplicate Advisory: phpMyFAQ has an Authorization Bypass in All Admin Pages Due to Non-Terminating Permission Check Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-wj3q-vw2v-3rj3 Duplicate Advisory: phpMyFAQ: SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-289f-fq7w-6q2w phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha |
Critical EPSS 1.71% |
< 4.1.2 | 4.1.2 |
| GHSA-gh9p-q46p-57g2 phpMyFAQ: Path Traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins |
High EPSS 0.27% |
< 4.1.2 | 4.1.2 |
| GHSA-99qv-g4x9-mgc3 phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query |
High EPSS 0.34% |
< 4.1.2 | 4.1.2 |
| GHSA-pm8c-3qq3-72w7 phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields |
High EPSS 0.26% |
< 4.1.2 | 4.1.2 |
| GHSA-9pq7-mfwh-xx2j phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id |
Critical EPSS 0.43% |
< 4.1.2 | 4.1.2 |
| GHSA-jrc5-w569-h7h5 phpMyFAQ: Ordinary Authenticated User Can Access Admin-Only API Endpoints Due to Insufficient Authorization Check in phpMyFAQ |
Medium EPSS 0.21% |
>= 4.1.1, < 4.1.2 | 4.1.2 |
| GHSA-pqh6-8fxf-jx22 phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering |
High EPSS 0.29% |
< 4.1.2 | 4.1.2 |
| GHSA-rm98-82fr-mcfx phpMyFAQ's Missing CONFIGURATION_EDIT Permission Check on 12 Admin API Configuration Tab Endpoints Allows Information Disclosure by Any Authenticated User |
Medium EPSS 0.26% |
< 4.1.2 | 4.1.2 |
| GHSA-whqh-9pq5-c7r3 phpMyFAQ has a SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS |
Medium EPSS 0.19% |
< 4.1.2 | 4.1.2 |
| GHSA-f5p7-2c9q-8896 phpMyFAQ has Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization |
Medium EPSS 0.19% |
< 4.1.2 | 4.1.2 |
| GHSA-7cx3-2qx2-3g6w phpMyFAQ's Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags |
Medium EPSS 0.22% |
< 4.1.2 | 4.1.2 |
| GHSA-hpgw-ww76-c68r phpMyFAQ has an Authorization Bypass in All Admin Pages Due to Non-Terminating Permission Check |
High EPSS 0.30% |
< 4.1.2 | 4.1.2 |
| GHSA-9525-27vj-c8r8 phpMyFAQ has stored XSS via Utils::parseUrl() in comment rendering |
High EPSS 0.25% |
>= 4.1.1, < 4.1.2 | 4.1.2 |
| GHSA-cv2g-8cj8-vgc7 phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes() |
Medium EPSS 0.25% |
< 4.1.1 | 4.1.1 |
| GHSA-38m8-xrfj-v38x phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController |
High EPSS 0.70% |
< 4.1.1 | 4.1.1 |
| GHSA-98gw-w575-h2ph phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ Editor |
Medium EPSS 0.27% |
< 4.1.1 | 4.1.1 |
| GHSA-j4rc-96xj-gvqc phpMyFAQ: Public API endpoints expose emails and invisible questions |
High EPSS 0.41% |
< 4.0.17 | 4.0.17 |
| GHSA-wm8h-26fv-mg7g phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing) |
Medium EPSS 1.74% |
< 4.0.17 | 4.0.17 |
| GHSA-7p9h-m7m8-vhhv phpMyFAQ: Attachment download allowed without dlattachment right (broken access control) |
Medium EPSS 0.46% |
< 4.0.17 | 4.0.17 |
| GHSA-x2v3-9p22-w3x6 phpMyFAQ contains a CSV injection vulnerability |
High EPSS 0.54% |
<= 3.1.12 | No fix yet |
| GHSA-fxm2-cmwj-qvx4 phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality |
High EPSS 0.80% |
< 4.0.14 | 4.0.14 |
| GHSA-ww33-jppq-qfrp phpMyFAQ Vulnerable to Stored HTML Injection at FAQ |
High EPSS 0.43% |
>= 3.2.10, <= 4.0.1 | No fix yet |
| GHSA-hm8r-95g3-5hj9 phpMyFAQ Stored Cross-site Scripting at File Attachments |
Medium EPSS 0.51% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-mmh6-5cpf-2c72 phpMyFAQ Path Traversal in Attachments |
Low EPSS 0.59% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-48vw-jpf8-hwqh phpMyFAQ Stored HTML Injection at contentLink |
Medium EPSS 0.54% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-2grw-mc9r-822r phpMyFAQ SQL injections at insertentry & saveentry |
High EPSS 0.97% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-6p68-36m6-392r phpMyFAQ Stored Cross-site Scripting at FAQ News Content |
Medium EPSS 0.54% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-pwh2-fpfr-x5gf phpMyFAQ's File Upload Bypass at Category Image Leads to RCE |
High EPSS 1.48% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-q7g6-xfh2-vhpx phpMyFAQ stored Cross-site Scripting at user email |
Medium EPSS 0.69% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-qgxx-4xv5-6hcw phpMyFAQ SQL Injection at "Save News" |
High EPSS 1.15% |
>= 3.2.5, < 3.2.6 | 3.2.6 |
| GHSA-7m8g-fprr-47fx phpMyFAQ vulnerable to stored XSS on attachments filename |
Medium EPSS 0.88% |
< 3.2.5 | 3.2.5 |
| GHSA-9hhf-xmcw-r3xg phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes |
Medium EPSS 0.74% |
< 3.2.5 | 3.2.5 |
| GHSA-6648-6g96-mg35 phpMyFAQ User Removal Page Allows Spoofing Of User Details |
Medium EPSS 0.59% |
< 3.2.5 | 3.2.5 |
| GHSA-6rj8-9cm9-6gff phpMyFAQ vulnerable to Cross-site Scripting |
High EPSS 1.15% |
< 3.2.0-alpha | 3.2.0-alpha |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor