Skip to content
OpenAdvisories

Vendor

phpMyFAQ

6 known vulnerabilities.

Products

phpMyFAQ 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-57994

    phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints

    phpMyFAQ before 4.1.5 applies inconsistent active=yes and publication-date filtering across its public FAQ API endpoints, allowing unauthenticated attackers to retrieve inactive (draft or review-only) FAQ content. Specifically, GET /api/v3.1/faq/{categoryId}/…

    phpMyFAQ phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist