Skip to content
OpenAdvisories

Package · Packagist

phpmyfaq/phpmyfaq

47 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24421 Public exploit

    phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user

    phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated() but does…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist