PH
Product
phpmyfaq
108
CVEs
0
On KEV
9.8
Max CVSS
32
New 30D
Severity mix
Critical 5High 40Medium 58Low 5
Watch
Add phpmyfaq to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34729 | 4.8 | Apr 2 | phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes() Affected: < 4.1.1 |
| CVE-2024-29179 | 4.8 | Mar 25 | phpMyFAQ Stored Cross-site Scripting at File Attachments Affected: 3.2.5 |
| CVE-2026-111900 | 4.3 | Oct 17 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.php Affected: before 4.1.9; 4.2.0-alpha before 4.2.0-beta |
| CVE-2026-111889 | 4.3 | Oct 17 | phpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin Dashboard Affected: 4.1.0 before 4.1.9; 4.2.0-alpha before 4.2.0-beta |
| CVE-2026-76211 | 4.3 | Aug 19 | phpMyFAQ before 4.1.7 Information Disclosure via Admin API Affected: before 4.1.7 |
| CVE-2026-76209 | 4.3 | Aug 19 | phpMyFAQ before v4.1.6 Registration Bypass via API Affected: before 4.1.6 |
| CVE-2026-45009 | 4.3 | May 15 | phpMyFAQ - Insufficient Authorization Check in Admin API Endpoints Affected: 4.1.1 before 4.1.2 |
| CVE-2026-45007 | 4.3 | May 15 | phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosure Affected: before 4.1.2 |