Vulnerability in Thorsten Phpmyfaq
CVE-2026-34973
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages() method in phpmyfaq/src/phpMyFAQ/Search.php uses real_escape_string() (via escape()) to sanitize the search term before embedding it in LIKE cla…
EPSS: 0.001 (28.7th percentile) — read the EPSS interpretation.
Affected products
- Thorsten Phpmyfaq — versions < 4.1.1
Weakness classification (CWE)
References
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-gcp9-5jc8-976x (x_refsource_CONFIRM)
- https://github.com/thorsten/phpMyFAQ/releases/tag/4.1.1 (x_refsource_MISC)