Skip to content
OpenAdvisories

Vendor

thorsten

178 known vulnerabilities.

Products

phpMyFAQ 109 thorsten/phpmyfaq 69
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24421 Public exploit

    phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user

    phpMyFAQ is an open source FAQ web application. Versions 4.0.16 and below have flawed authorization logic which exposes the /api/setup/backup endpoint to any authenticated user despite their permissions. SetupController.php uses userIsAuthenticated() but does…

    thorsten phpMyFAQ thorsten/phpmyfaq phpmyfaq/phpmyfaq Packagist
  • Medium 4.9
    CVE-2024-55889 Public exploit

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wi…

    thorsten phpMyFAQ thorsten/phpmyfaq Packagist
  • Critical 9.8
    CVE-2022-4407 Public exploit

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.3
    CVE-2022-3766 Public exploit

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist