← Back

Phpmyfaq

phpmyfaq

Vendor: Phpmyfaq • 140 CVEs

CVEs (140)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Feb 12, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Jan 15, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.10.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Dec 11, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Dec 11, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Dec 11, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Oct 31, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Oct 31, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Oct 29, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.8.
1Phpmyfaq
1Phpmyfaq
Jun 17, 2026
Oct 19, 2022
N/A· v4
8.4 HIGH· v3
N/A· v2
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-alpha.
1Phpmyfaq
1Phpmyfaq
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.2 HIGH· v3
9.0 HIGH· v2
The admin backend in phpMyFAQ before 2.9.11 allows CSV injection in reports.
1Phpmyfaq
1Phpmyfaq
Nov 21, 2024
Sep 7, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
phpMyFAQ before 2.9.11 allows CSRF.
1Phpmyfaq
1Phpmyfaq
Nov 21, 2024
Aug 28, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.