Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-34729

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, there is a stored XSS vulnerability via Regex Bypass in Filter::removeAttributes(). This issue has been patched in version 4.1.1.

VectorNETWORK

PublishedApr 02, 2026, 15:16

Published Bysecurity-advisories@github.com

Base Score

Score4.8

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

phpmyfaq/phpmyfaq(Packagist)04.1.1N/A

References

https://github.com/thorsten/phpMyFAQ/releases/tag/4.1.1
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-cv2g-8cj8-vgc7

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK