Medium
CVE-2026-46362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 47
Reset filters
High
CVE-2026-46367
phpMyFAQ has stored XSS via Utils::parseUrl() in comment rendering
Medium
CVE-2026-34729
phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes()
High
CVE-2026-34728
phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController
Medium
CVE-2026-32629
phpMyFAQ is Vulnerable to Stored XSS via Unsanitized Email Field in Admin FAQ Editor
Medium
CVE-2026-24422
phpMyFAQ: Public API endpoints expose emails and invisible questions
Medium
CVE-2026-24421
phpMyFAQ: /api/setup/backup accessible to any authenticated user (authz missing)
Medium
CVE-2026-24420
phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)
Medium
CVE-2023-53929
phpMyFAQ contains a CSV injection vulnerability
High
CVE-2025-62519
phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
Medium
CVE-2024-56199
phpMyFAQ Vulnerable to Stored HTML Injection at FAQ
Medium
CVE-2024-27300
phpMyFAQ stored Cross-site Scripting at user email
High
CVE-2024-28105
phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
Medium
CVE-2024-28106
phpMyFAQ Stored Cross-site Scripting at FAQ News Content
High
CVE-2024-28107
phpMyFAQ SQL injections at insertentry & saveentry
Medium
CVE-2024-28108
phpMyFAQ Stored HTML Injection at contentLink
Medium
CVE-2024-29179
phpMyFAQ Stored Cross-site Scripting at File Attachments
High
CVE-2024-27299
phpMyFAQ SQL Injection at "Save News"
Low
CVE-2024-29196
phpMyFAQ Path Traversal in Attachments
Medium
CVE-2024-24574
phpMyFAQ vulnerable to stored XSS on attachments filename
Medium
CVE-2024-22208
phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
Medium
CVE-2024-22202
phpMyFAQ User Removal Page Allows Spoofing Of User Details
High
CVE-2022-3608
phpMyFAQ vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.