Product by Thorsten

    Thorsten/phpmyfaq

    102 known vulnerabilities in Thorsten/phpmyfaq (Thorsten), 0 of them actively exploited (CISA KEV).

    Key figures

    102

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    18

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Thorsten/phpmyfaq (Thorsten)
    CriticalCVE-2022-4407

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    also in 1 other product

    		9.8
    CriticalCVE-2026-46364

    phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

    also in 1 other product

    		9.8
    HighCVE-2022-3766

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    also in 1 other product

    		7.3
    MediumCVE-2026-24421

    phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user

    also in 2 other products

    		6.5
    HighCVE-2023-1880

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    also in 1 other product

    		8.3
    CriticalCVE-2023-0789

    Command Injection in thorsten/phpmyfaq

    also in 1 other product

    		8.1
    HighCVE-2024-55889

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    also in 2 other products

    		4.9
    HighCVE-2026-56737

    phpMyFAQ's two-factor authentication login bypasses the password factor

    also in 1 other product

    		8.1
    CriticalCVE-2022-3754

    Weak Password Requirements in thorsten/phpmyfaq

    also in 1 other product

    		7.5
    HighCVE-2026-35672

    phpMyFAQ - Authentication Bypass via Empty API Token

    also in 1 other product

    		7.5
    CriticalCVE-2026-45010

    phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint

    also in 1 other product

    		9.1
    HighCVE-2023-5863

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    also in 1 other product

    		7.4
    HighCVE-2026-56738

    phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion

    also in 1 other product

    		—
    HighCVE-2022-3608

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    also in 1 other product

    		7.2
    CriticalCVE-2023-4006

    Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq

    also in 1 other product

    		8.8
    HighCVE-2026-35675

    phpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/update

    also in 1 other product

    		8.2
    HighCVE-2026-56736

    phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

    also in 1 other product

    		8.2
    CriticalCVE-2023-0788

    Code Injection in thorsten/phpmyfaq

    also in 1 other product

    		8.1
    HighCVE-2026-35671

    phpMyFAQ - Insecure Direct Object Reference in User Password API

    also in 1 other product

    		8.8
    CriticalCVE-2023-0310

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    also in 1 other product

    		9.8
    HighCVE-2026-46366

    phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypass

    also in 1 other product

    		7.5
    CriticalCVE-2023-5320

    Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

    also in 1 other product

    		9.0
    CriticalCVE-2023-1886

    Authentication Bypass by Capture-replay in thorsten/phpmyfaq

    also in 1 other product

    		7.3
    HighCVE-2022-3765

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    also in 1 other product

    		8.2
    HighCVE-2023-1887

    Business Logic Errors in thorsten/phpmyfaq

    also in 1 other product

    		8.3

    All vulnerabilities in search

    All products by Thorsten