pkg:Packagist/phpMyFAQ/phpMyFAQ

All known vulnerabilities

• MEDIUM6.5CVE-2026-45008Duplicate Advisory: phpMyFAQ: Path traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins
  from 0, < 4.1.2
• MEDIUM5.4CVE-2026-46360Duplicate Advisory: phpMyFAQ: SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS
  from 0, < 4.1.2
• MEDIUM5.4CVE-2026-46363Duplicate Advisory: phpMyFAQ: Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization
  from 0, < 4.1.2
• MEDIUM4.3phpMyFAQ: Ordinary Authenticated User Can Access Admin-Only API Endpoints Due to Insufficient Authorization Check in phpMyFAQ
  from 0, < 4.1.2