In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.

Published Oct 21, 2017 · Updated Sep 17, 2024 · Assigned by mitre