Records whose assigning authority named Thorsten as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-85593phpMyFAQ before 4.1.8 Stored XSS via html_entity_decodethorsten phpMyFAQ
CVE-2026-85592phpMyFAQ before 4.1.8 Authorization Bypass via question/createthorsten phpMyFAQ
CVE-2026-85591phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Changethorsten phpMyFAQ
CVE-2026-85590phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disablethorsten phpMyFAQ
CVE-2026-85589phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard APIthorsten phpMyFAQ
CVE-2026-85588phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Exportthorsten phpMyFAQ
CVE-2026-85587phpMyFAQ before 4.1.8 Incorrect Authorization via Admin Pagesthorsten phpMyFAQ
CVE-2026-85586phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterthorsten phpMyFAQ
CVE-2026-76215phpMyFAQ before 4.1.7 Missing Authorization via child resourcesthorsten phpMyFAQ
CVE-2026-76214phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challengethorsten phpMyFAQ
CVE-2026-76213phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttlethorsten phpMyFAQ
CVE-2026-76212phpMyFAQ before 4.1.7 LIKE Wildcard Injection via PostgreSQLthorsten phpMyFAQ
CVE-2026-76211phpMyFAQ before 4.1.7 Information Disclosure via Admin APIthorsten phpMyFAQ
CVE-2026-76210phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportthorsten phpMyFAQ
CVE-2026-76209phpMyFAQ before v4.1.6 Registration Bypass via APIthorsten phpMyFAQ
CVE-2026-76208phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPthorsten phpMyFAQ
CVE-2026-76207phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiethorsten phpMyFAQ
CVE-2026-76206phpMyFAQ before 4.1.7 Information Disclosure via PDF Exportthorsten phpMyFAQ
CVE-2026-76205phpMyFAQ before 4.1.7 SQL Injection via Glossarythorsten phpMyFAQ
CVE-2026-75920phpMyFAQ before 4.1.6 Information Disclosure via Backup ZIPthorsten phpMyFAQ
CVE-2026-75919phpMyFAQ before 4.1.7 Authentication Bypass via Setup APIthorsten phpMyFAQ
CVE-2026-75918phpMyFAQ before 4.1.7 Authentication Bypass via Tracking Filethorsten phpMyFAQ
CVE-2026-66399phpMyFAQ before 4.1.6 Privilege Escalation via Group Membershipthorsten phpMyFAQ
CVE-2026-66398phpMyFAQ before 4.1.6 Remote Code Execution via Configuration APIthorsten phpMyFAQ
CVE-2026-66397phpMyFAQ before 4.1.6 Path Traversal via category image deletionthorsten phpMyFAQ
CVE-2026-49205phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)thorsten phpMyFAQ
CVE-2026-48488phpMyFAQ has Weak Cryptography - SHA1 for Password Hashingthorsten phpMyFAQ
CVE-2026-46367phpMyFAQ - Stored XSS via Utils::parseUrl() in Comment Renderingthorsten phpmyfaq
CVE-2026-46366phpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission Bypassthorsten phpmyfaq
CVE-2026-46365phpMyFAQ - Missing Authorization in Tag Deletion Endpointthorsten phpmyfaq
CVE-2026-46364phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptchathorsten phpmyfaq
CVE-2026-46363phpMyFAQ - Stored XSS in FAQ Question/Answer via Encode-Decode Bypassthorsten phpmyfaq
CVE-2026-46362phpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission Checkthorsten phpmyfaq
CVE-2026-46361phpMyFAQ - Stored Cross-Site Scripting via raw Filter in search.twigthorsten phpmyfaq
CVE-2026-46360phpMyFAQ - Stored XSS via Entity Decoding Depth Limit Bypass in SVG Sanitizerthorsten phpmyfaq
CVE-2026-46359phpMyFAQ - SQL Injection in CurrentUser::setTokenData via Unescaped OAuth Token Fieldsthorsten phpmyfaq
CVE-2026-45010phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpointthorsten phpmyfaq
CVE-2026-45009phpMyFAQ - Insufficient Authorization Check in Admin API Endpointsthorsten phpmyfaq
CVE-2026-45008phpMyFAQ - Path Traversal in Client::deleteClientFolder via URL Parameterthorsten phpmyfaq
CVE-2026-45007phpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information Disclosurethorsten phpmyfaq
CVE-2026-35676phpMyFAQ - Unauthenticated Password Reset via User Password Update Endpointthorsten phpMyFAQ
CVE-2026-35675phpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/updatethorsten phpMyFAQ
CVE-2026-35672phpMyFAQ - Authentication Bypass via Empty API Tokenthorsten phpMyFAQ
CVE-2026-35671phpMyFAQ - Insecure Direct Object Reference in User Password APIthorsten phpMyFAQ
CVE-2026-34974phpMyFAQ: SVG Sanitizer Bypass via HTML Entity Encoding leads to Stored XSS and Privilege Escalationthorsten phpMyFAQ
CVE-2026-34973phpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content Disclosurethorsten phpMyFAQ
CVE-2026-34729phpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes()thorsten phpMyFAQ
CVE-2026-34728phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserControllerthorsten phpMyFAQ
CVE-2026-32629phpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ Editorthorsten phpMyFAQ
CVE-2026-27836phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpointthorsten phpMyFAQ
CVE-2026-24422phpMyFAQ: Public API endpoints expose emails and invisible questionsthorsten phpMyFAQ
CVE-2026-24421phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated userthorsten phpMyFAQ
CVE-2026-24420phpMyFAQ: Attachment download allowed without dlattachment right (broken access control)thorsten phpMyFAQ
CVE-2025-69200phpMyFAQ has unauthenticated config backup download via /api/setup/backupthorsten phpMyFAQ
CVE-2025-68951phpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig |rawthorsten phpMyFAQ
CVE-2025-62519phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionalitythorsten phpMyFAQ
CVE-2025-59943phpMyFAQ duplicate email registration allows multiple accounts with the same emailthorsten phpMyFAQ
CVE-2025-26555WordPress Debug-Bar-Extender Plugin <= 0.5 - Reflected Cross Site Scripting (XSS) vulnerabilityThorsten Ott Debug-Bar-Extender
CVE-2024-56199phpMyFAQ Vulnerable to Stored HTML Injection at FAQthorsten phpMyFAQ
CVE-2024-55889phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Framesthorsten phpMyFAQ
CVE-2024-54141phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not availablethorsten phpMyFAQ
CVE-2024-29196phpMyFAQ Path Traversal in Attachmentsthorsten phpMyFAQ
CVE-2024-29179phpMyFAQ Stored Cross-site Scripting at File Attachmentsthorsten phpMyFAQ
CVE-2024-28108phpMyFAQ Stored HTML Injection at contentLinkthorsten phpMyFAQ
CVE-2024-28107phpMyFAQ SQL injections at insertentry & saveentrythorsten phpMyFAQ
CVE-2024-28106phpMyFAQ Stored XSS at FAQ News Contentthorsten phpMyFAQ
CVE-2024-28105phpMyFAQ's File Upload Bypass at Category Image Leads to RCEthorsten phpMyFAQ
CVE-2024-27300phpMyFAQ Stored XSS at user emailthorsten phpMyFAQ
CVE-2024-27299phpMyFAQ SQL Injection at "Save News"thorsten phpMyFAQ
CVE-2024-24574phpMyFAQ vulnerable to stored XSS on attachments filenamethorsten phpMyFAQ
CVE-2024-22208phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposesthorsten phpMyFAQ
CVE-2024-22202User Removal Page Allows Spoofing Of User Detailsthorsten phpMyFAQ
CVE-2023-6890Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-6889Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5867Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5866Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5865Insufficient Session Expiration in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5864Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5863Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5320Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5319Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5317Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5316Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-5227Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-4007Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-4006Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-3469Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2999Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2998Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2753Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2752Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2550Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2429Improper Access Control in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2428Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-2427Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1887Business Logic Errors in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1886Authentication Bypass by Capture-replay in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1885Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1884Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1883Improper Access Control in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1882Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1880Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1879Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1878Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1875Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1762Improper Privilege Management in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1761Cross-site Scripting in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1760Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1759Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1758Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1757Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1756Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1755Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1754Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-1753Weak Password Requirements in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0880Misinterpretation of Input in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0794Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0793Weak Password Requirements in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0792Code Injection in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0791Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0790Uncaught Exception in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0789Command Injection in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0788Code Injection in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0787Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0786Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0314Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0313Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0312Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0311Improper Authentication in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0310Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0309Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0308Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0307Weak Password Requirements in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2023-0306Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-4409Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-4408Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-4407Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-3766Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-3765Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-3754Weak Password Requirements in thorsten/phpmyfaqthorsten/phpmyfaq
CVE-2022-3608Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
141 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.