Skip to content
OpenAdvisories

Product · phpMyFAQ

phpMyFAQ

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Function

    phpMyFAQ before 4.1.5 contains a potential authenticated path traversal vulnerability in the concatenatePaths() function within src/phpMyFAQ/Export/Pdf/Wrapper.php. A user with FAQ editing privileges can store HTML containing crafted image paths that are proc…