thorsten/phpMyFAQ (Packagist)
Advisories
125
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 4.2.0-alpha or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require thorsten/phpMyFAQ:^4.2.0-alphaKnown vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-rw77-vq4g-x3hp phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion |
High EPSS 0.26% |
< 4.1.6 | 4.1.6 |
| GHSA-8gpw-xvpf-hvx5 phpMyFAQ's two-factor authentication login bypasses the password factor |
High EPSS 0.53% |
>= 3.2.0, < 4.1.6 | 4.1.6 |
| GHSA-pgwp-vc7q-cvj3 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission |
High EPSS 0.24% |
< 4.2.0-alpha | 4.2.0-alpha |
| GHSA-6pvm-2vjj-rx4w phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration |
Medium EPSS 0.25% |
< 4.2.0-alpha | 4.2.0-alpha |
| GHSA-mf8r-wm2w-f8c5 phpMyFAQ public FAQ APIs expose inactive FAQ content |
Medium EPSS 0.36% |
>= 4.1.0, < 4.1.5 | 4.1.5 |
| GHSA-88g4-74f3-63x9 phpMyFAQ has Potential Authenticated Path Traversal in PDF Export |
Medium EPSS 0.40% |
>= 4.0.0-alpha, < 4.1.5 | 4.1.5 |
| GHSA-pg62-f8g4-4wqh phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold |
High EPSS 0.44% |
< 4.1.5 | 4.1.5 |
| GHSA-985r-q3qp-299h phpMyFAQ has an incomplete fix for GHSA-xvp4-phqj-cjr3 — editUser() and updateUserRights() lack authorization guards |
High EPSS 0.44% |
< 4.1.4 | 4.1.4 |
| GHSA-8c6h-7g6x-m5x4 phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix) |
Medium EPSS 0.39% |
< 4.1.4 | 4.1.4 |
| GHSA-58fg-62fg-3fcj phpMyFAQ has Weak Cryptography - SHA1 for Password Hashing |
Low EPSS 0.18% |
< 4.1.4 | 4.1.4 |
| GHSA-w9xh-5f39-vq89 phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration |
High EPSS 0.42% |
< 4.1.3 | 4.1.3 |
| GHSA-gp95-j463-vv28 phpMyFAQ: Default Empty API Token Authentication Bypass |
High EPSS 0.48% |
< 4.1.3 | 4.1.3 |
| GHSA-xvp4-phqj-cjr3 phpMyFAQ: IDOR Account Takeover |
High EPSS 0.38% |
< 4.1.3 | 4.1.3 |
| GHSA-9qv9-8xv6-5p35 phpMyFAQ: Unauthenticated Password Reset Endpoint Allows User Enumeration and Forced Password Change Without Token Validation |
High EPSS 0.30% |
< 4.1.3 | 4.1.3 |
| GHSA-w9mj-gfrm-hj5x Duplicate Advisory: phpMyFAQ has an Authorization Bypass in All Admin Pages Due to Non-Terminating Permission Check Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-478m-mrw4-qf2w Duplicate Advisory: phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-p26v-fx3x-r2rp Duplicate Advisory: phpMyFAQ's Missing CONFIGURATION_EDIT Permission Check on 12 Admin API Configuration Tab Endpoints Allows Information Disclosure by Any Authenticated User Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-5h62-f8fg-4w7q Duplicate Advisory: phpMyFAQ: Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-wj3q-vw2v-3rj3 Duplicate Advisory: phpMyFAQ: SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-6626-79jh-5ccr Duplicate Advisory: phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id Withdrawn |
Critical | < 4.1.2 | 4.1.2 |
| GHSA-w42g-jj8w-fj77 Duplicate Advisory: phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-h36g-93qx-rxgr Duplicate Advisory: phpMyFAQ: Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-p9wc-4pjv-rg82 Duplicate Advisory: phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-9r8r-x3vg-6xh4 Duplicate Advisory: phpMyFAQ: Ordinary Authenticated User Can Access Admin-Only API Endpoints Due to Insufficient Authorization Check Withdrawn |
Medium | < 4.1.2 | 4.1.2 |
| GHSA-ch9q-c9mp-j5gq Duplicate Advisory: phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha Withdrawn |
Critical | < 4.1.2 | 4.1.2 |
| GHSA-cqrw-j4qc-7f9w Duplicate Advisory: phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query Withdrawn |
High | < 4.1.2 | 4.1.2 |
| GHSA-289f-fq7w-6q2w phpMyFAQ has unauthenticated SQL injection via User-Agent header in BuiltinCaptcha |
Critical EPSS 1.71% |
< 4.1.2 | 4.1.2 |
| GHSA-gh9p-q46p-57g2 phpMyFAQ: Path Traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins |
High EPSS 0.27% |
< 4.1.2 | 4.1.2 |
| GHSA-99qv-g4x9-mgc3 phpMyFAQ has unauthenticated FAQ permission bypass via getFaqBySolutionId fallback query |
High EPSS 0.34% |
< 4.1.2 | 4.1.2 |
| GHSA-pm8c-3qq3-72w7 phpMyFAQ has SQL Injection in CurrentUser::setTokenData through unescaped OAuth token fields |
High EPSS 0.26% |
< 4.1.2 | 4.1.2 |
| GHSA-9pq7-mfwh-xx2j phpMyFAQ enables unauthenticated 2FA brute-force attack via /admin/check acceptance of arbitrary user-id |
Critical EPSS 0.43% |
< 4.1.2 | 4.1.2 |
| GHSA-jrc5-w569-h7h5 phpMyFAQ: Ordinary Authenticated User Can Access Admin-Only API Endpoints Due to Insufficient Authorization Check in phpMyFAQ |
Medium EPSS 0.21% |
>= 4.1.1, < 4.1.2 | 4.1.2 |
| GHSA-pqh6-8fxf-jx22 phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering |
High EPSS 0.29% |
< 4.1.2 | 4.1.2 |
| GHSA-rm98-82fr-mcfx phpMyFAQ's Missing CONFIGURATION_EDIT Permission Check on 12 Admin API Configuration Tab Endpoints Allows Information Disclosure by Any Authenticated User |
Medium EPSS 0.26% |
< 4.1.2 | 4.1.2 |
| GHSA-whqh-9pq5-c7r3 phpMyFAQ has a SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS |
Medium EPSS 0.19% |
< 4.1.2 | 4.1.2 |
| GHSA-f5p7-2c9q-8896 phpMyFAQ has Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization |
Medium EPSS 0.19% |
< 4.1.2 | 4.1.2 |
| GHSA-7cx3-2qx2-3g6w phpMyFAQ's Missing Authorization on Tag Deletion Allows Any Authenticated User to Delete Tags |
Medium EPSS 0.22% |
< 4.1.2 | 4.1.2 |
| GHSA-hpgw-ww76-c68r phpMyFAQ has an Authorization Bypass in All Admin Pages Due to Non-Terminating Permission Check |
High EPSS 0.30% |
< 4.1.2 | 4.1.2 |
| GHSA-9525-27vj-c8r8 phpMyFAQ has stored XSS via Utils::parseUrl() in comment rendering |
High EPSS 0.25% |
>= 4.1.1, < 4.1.2 | 4.1.2 |
| GHSA-5crx-pfhq-4hgg phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding Leads to Stored XSS and Privilege Escalation |
Medium EPSS 0.18% |
< 4.1.1 | 4.1.1 |
| GHSA-gcp9-5jc8-976x phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content Disclosure |
Medium EPSS 0.35% |
< 4.1.1 | 4.1.1 |
| GHSA-98gw-w575-h2ph phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ Editor |
Medium EPSS 0.27% |
< 4.1.1 | 4.1.1 |
| GHSA-w22q-m2fm-x9f4 phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint |
High EPSS 0.45% |
< 4.0.18 | 4.0.18 |
| GHSA-j4rc-96xj-gvqc phpMyFAQ: Public API endpoints expose emails and invisible questions |
High EPSS 0.41% |
< 4.0.17 | 4.0.17 |
| GHSA-wm8h-26fv-mg7g phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing) |
Medium EPSS 1.74% |
< 4.0.17 | 4.0.17 |
| GHSA-7p9h-m7m8-vhhv phpMyFAQ: Attachment download allowed without dlattachment right (broken access control) |
Medium EPSS 0.46% |
< 4.0.17 | 4.0.17 |
| GHSA-9cg9-4h4f-j6fg phpMyFAQ has unauthenticated config backup download via /api/setup/backup |
High EPSS 2.14% |
>= 4.1.0-alpha, <= 4.1.0-beta.2 | No fix yet |
| GHSA-9cg9-4h4f-j6fg phpMyFAQ has unauthenticated config backup download via /api/setup/backup |
High EPSS 2.14% |
< 4.0.16 | 4.0.16 |
| GHSA-jv8r-hv7q-p6vc phpMyFAQ has Stored XSS in user list via admin-managed display_name |
Medium EPSS 0.28% |
>= 4.0.14, < 4.0.16 | 4.0.16 |
| GHSA-x2v3-9p22-w3x6 phpMyFAQ contains a CSV injection vulnerability |
High EPSS 0.54% |
<= 3.1.12 | No fix yet |
| GHSA-fxm2-cmwj-qvx4 phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality |
High EPSS 0.80% |
< 4.0.14 | 4.0.14 |
| GHSA-9wj2-4hcm-r74j phpMyFAQ duplicate email registration allows multiple accounts with the same email |
Critical EPSS 0.42% |
>= 4.0.7, < 4.0.13 | 4.0.13 |
| GHSA-ww33-jppq-qfrp phpMyFAQ Vulnerable to Stored HTML Injection at FAQ |
High EPSS 0.43% |
>= 3.2.10, <= 4.0.1 | No fix yet |
| GHSA-m3r7-8gw7-qwvc thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames |
High EPSS 2.19% |
< 3.2.10 | 3.2.10 |
| GHSA-vrjr-p3xp-xx2x phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available |
High EPSS 0.49% |
< 4.0.0 | 4.0.0 |
| GHSA-4h37-q5j3-hw96 phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.46% |
< 3.1.17 | 3.1.17 |
| GHSA-w8xj-992g-842f phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.46% |
< 3.1.17 | 3.1.17 |
| GHSA-prrv-r843-4p75 Cross-site Scripting (XSS) in thorsten/phpmyfaq |
Medium EPSS 0.41% |
< 3.2.2 | 3.2.2 |
| GHSA-34w4-wrqp-j47g Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq |
Medium EPSS 0.29% |
< 3.2.1 | 3.2.1 |
| GHSA-f728-prhw-2g68 Insufficient Session Expiration in thorsten/phpmyfaq |
Critical EPSS 0.58% |
< 3.2.2 | 3.2.2 |
| GHSA-g5hp-328h-jj98 phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.53% |
< 3.2.1 | 3.2.1 |
| GHSA-j4vj-w5rj-8grw phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 1.10% |
< 3.2.2 | 3.2.2 |
| GHSA-pp4w-g5p4-85p2 phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.58% |
< 3.1.18 | 3.1.18 |
| GHSA-j5ww-5xf4-hqm2 phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.48% |
< 3.1.18 | 3.1.18 |
| GHSA-5jwv-m8h3-69cg phpMyFaq Cross-site Scripting vulnerability |
Medium EPSS 0.39% |
< 3.1.18 | 3.1.18 |
| GHSA-58v7-58c2-qwm9 phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.48% |
< 3.1.18 | 3.1.18 |
| GHSA-qcjg-hvg6-hxcp phpMyFAQ allows unrestricted file types in image field |
Critical EPSS 0.62% |
< 3.1.18 | 3.1.18 |
| GHSA-q9vm-29ph-p7mp phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.49% |
< 3.1.16 | 3.1.16 |
| GHSA-2xvx-368h-qcmv phpMyFAQ Improper Neutralization of Formula Elements in a CSV File vulnerability |
Critical EPSS 0.81% |
< 3.1.16 | 3.1.16 |
| GHSA-v6g2-jwrm-h5r5 phpMyFAQ Cross-site Scripting |
Medium EPSS 0.58% |
< 3.2.0-beta.2 | 3.2.0-beta.2 |
| GHSA-94r7-63g8-c4jw thorsten/phpmyfaq vulnerable to cross-site scripting |
Medium EPSS 0.48% |
< 3.1.14 | 3.1.14 |
| GHSA-974q-4vvr-vg9c thorsten/phpmyfaq vulnerable to cross-site scripting |
Medium EPSS 0.52% |
< 3.1.14 | 3.1.14 |
| GHSA-vppq-6ff8-2m8w phpMyFAQ vulnerable to stored Cross-site Scripting |
Medium EPSS 0.55% |
< 3.2.0-beta | 3.2.0-beta |
| GHSA-j657-pjgc-c4h6 phpMyFAQ vulnerable to stored Cross-site Scripting |
Medium EPSS 0.54% |
< 3.2.0-beta | 3.2.0-beta |
| GHSA-5mf7-p346-7rm8 Cross Site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.46% |
< 3.1.13 | 3.1.13 |
| GHSA-5xq3-7mw9-wj5p Cross Site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.47% |
< 3.1.13 | 3.1.13 |
| GHSA-r69v-q48g-3966 phpMyFAQ Improper Access Control vulnerability |
Critical EPSS 0.53% |
< 3.1.13 | 3.1.13 |
| GHSA-8595-6653-96p2 phpMyFAQ vulnerable to Stored Cross-site Scripting |
Medium EPSS 0.56% |
< 3.1.13 | 3.1.13 |
| GHSA-ch5w-2994-6h82 Cross-site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.48% |
< 3.1.12 | 3.1.12 |
| GHSA-gx43-fqrx-6fcw thorsten/phpmyfaq vulnerable to business logic errors |
Medium EPSS 0.70% |
< 3.1.12 | 3.1.12 |
| GHSA-4cr4-x82x-hwm9 thorsten/phpmyfaq vulnerable to authentication bypass |
Critical EPSS 0.88% |
< 3.1.12 | 3.1.12 |
| GHSA-xxm6-ff3x-v4vm thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via category field name parameter |
Medium EPSS 0.48% |
< 3.1.12 | 3.1.12 |
| GHSA-gmjj-g2rm-xwm7 thorsten/phpmyfaq vulnerable to cross-site scripting (XSS) via stopword parameter |
Medium EPSS 0.45% |
< 3.1.12 | 3.1.12 |
| GHSA-2wjp-w7g7-h63q thorsten/phpmyfaq vulnerable to improper access control |
Medium EPSS 0.49% |
< 3.1.12 | 3.1.12 |
| GHSA-jph3-3j24-pg3j thorsten/phpmyfaq vulnerable to DOM cross-site scripting (XSS) via configuration privacy note URL parameter |
Medium EPSS 0.53% |
< 3.1.12 | 3.1.12 |
| GHSA-m8q9-7v2f-qjx9 thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via artlang parameter |
Medium EPSS 1.64% |
< 3.1.12 | 3.1.12 |
| GHSA-m9qm-m5w5-9pgj thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via updatecategory parameter |
Medium EPSS 0.47% |
< 3.1.12 | 3.1.12 |
| GHSA-gcmq-7652-x98j thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via adminlog |
Medium EPSS 0.54% |
< 3.1.12 | 3.1.12 |
| GHSA-3j93-7rf7-p7m6 thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) in FAQ comment username parameter |
Medium EPSS 0.54% |
< 3.1.12 | 3.1.12 |
| GHSA-jvjx-qqh7-6x6c thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via FAQ News link parameter |
Medium EPSS 0.53% |
< 3.1.12 | 3.1.12 |
| GHSA-8p48-ghv5-7qq7 thorsten/phpmyfaq vulnerable to stored cross-site scripting (XSS) via HTML export |
Medium EPSS 0.47% |
< 3.1.12 | 3.1.12 |
| GHSA-xww4-w6ff-5q3g thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management |
High EPSS 0.88% |
< 3.1.12 | 3.1.12 |
| GHSA-6cpg-gqgq-2rrr phpMyFAQ Code Injection vulnerability |
Medium EPSS 0.48% |
< 3.1.12 | 3.1.12 |
| GHSA-7q9c-f2v8-j8gw phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.53% |
< 3.1.12 | 3.1.12 |
| GHSA-4wfc-ghv5-2v7j phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.47% |
< 3.1.12 | 3.1.12 |
| GHSA-hp8m-g55r-9cfq phpMyFAQ Cross-site Scripting vulnerability |
Medium EPSS 0.61% |
< 3.1.12 | 3.1.12 |
| GHSA-gvg8-r8w2-9gfj phpMyFAQ vulnerable to improper input validation |
Medium EPSS 0.60% |
< 3.1.12 | 3.1.12 |
| GHSA-4p4m-5qp7-479x phpMyFAQ has weak password requirements |
Critical EPSS 0.72% |
< 3.1.12 | 3.1.12 |
| GHSA-f9c6-4j9h-6c5r Misinterpretation of Input in thorsten/phpmyfaq |
Medium EPSS 0.61% |
< 3.1.11 | 3.1.11 |
| GHSA-gf34-hh5r-f74h Cross-site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.56% |
< 3.1.11 | 3.1.11 |
| GHSA-fxrq-xhj9-rf5j Weak Password Requirements in thorsten/phpmyfaq |
High EPSS 0.71% |
< 3.1.11 | 3.1.11 |
| GHSA-wjrj-jc3w-ppfw Code Injection in thorsten/phpmyfaq |
Medium EPSS 0.62% |
< 3.1.11 | 3.1.11 |
| GHSA-c38p-vw6j-qjpr Cross-site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.56% |
< 3.1.11 | 3.1.11 |
| GHSA-6vv4-qq3r-9rv8 Uncaught Exception in thorsten/phpmyfaq |
High EPSS 0.71% |
< 3.1.11 | 3.1.11 |
| GHSA-6vp5-vv9p-7q62 Command Injection in thorsten/phpmyfaq |
Critical EPSS 1.66% |
< 3.1.11 | 3.1.11 |
| GHSA-r6cw-356h-mvwg Code Injection in thorsten/phpmyfaq |
Critical EPSS 0.89% |
< 3.1.11 | 3.1.11 |
| GHSA-gxxj-x426-xj2w Cross-site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.53% |
< 3.1.11 | 3.1.11 |
| GHSA-jfpg-jggf-rpph Cross-site Scripting in thorsten/phpmyfaq |
Medium EPSS 0.60% |
< 3.1.11 | 3.1.11 |
| GHSA-96x6-jf5w-84c5 phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.57% |
< 3.1.10 | 3.1.10 |
| GHSA-w475-749h-c77m phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.51% |
< 3.1.10 | 3.1.10 |
| GHSA-4p88-cfhq-f3vg phpMyFAQ has Weak Password Requirements |
Medium EPSS 0.67% |
< 3.1.10 | 3.1.10 |
| GHSA-m9xr-8cx7-53pj phpMyFAQ Reflected Cross-site Scripting vulnerability |
Medium EPSS 0.54% |
< 3.1.10 | 3.1.10 |
| GHSA-x2h8-4mhh-5hwh phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.42% |
< 3.1.10 | 3.1.10 |
| GHSA-g92r-9rxw-cmgx phpMyFAQ Improper Authentication vulnerability |
Critical EPSS 0.97% |
< 3.1.10 | 3.1.10 |
| GHSA-6449-vf6p-9hfp thorsten/phpmyfaq is vulnerable to cross-site scripting (XSS) |
Medium EPSS 0.59% |
< 3.1.10 | 3.1.10 |
| GHSA-9jff-8xmm-mw22 phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.57% |
< 3.1.10 | 3.1.10 |
| GHSA-25c3-7fvj-v45j phpMyFAQ Stored Cross-site Scripting vulnerability |
Medium EPSS 0.51% |
< 3.1.10 | 3.1.10 |
| GHSA-cp9c-phxx-55xm phpMyFAQ vulnerable to Cross-site Scripting |
Medium EPSS 4.85% |
< 3.1.9 | 3.1.9 |
| GHSA-rjf6-wj7r-5fj2 phpMyFAQ vulnerable to Cross-site Scripting |
Medium EPSS 0.51% |
< 3.1.9 | 3.1.9 |
| GHSA-wpgc-5cr5-h9gg phpMyFAQ has insecure HTTP cookies |
High EPSS 0.46% |
< 3.1.9 | 3.1.9 |
| GHSA-wr74-2v66-57pp phpMyFAQ vulnerable to stored Cross-site Scripting |
Medium EPSS 0.74% |
< 3.1.8 | 3.1.8 |
| GHSA-mg5h-rhjq-6v84 phpMyFAQ vulnerable to reflected Cross-site Scripting |
Medium EPSS 8.28% |
< 3.1.8 | 3.1.8 |
| GHSA-2rr3-rv49-p42f phpMyFAQ contains Weak Password Requirements |
Critical EPSS 1.57% |
< 3.1.8 | 3.1.8 |
| GHSA-6rj8-9cm9-6gff phpMyFAQ vulnerable to Cross-site Scripting |
High EPSS 1.15% |
< 3.2.0-alpha | 3.2.0-alpha |
| GHSA-p57w-9q28-j6v7 phpMyFAQ CSRF |
High EPSS 0.50% |
< 2.9.11 | 2.9.11 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor