Vulnerabilidades en thorsten
176 resultadosCVE-2026-76209MEDIUMphpMyFAQ before v4.1.6 Registration Bypass via APIEPSS 0.3%CVE-2026-46361HIGHphpMyFAQ - Stored Cross-Site Scripting via raw Filter in search.twigEPSS 0.3%CVE-2026-111890HIGHphpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRightsEPSS 0.3%CVE-2026-111910HIGHphpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Authorization Bypass via attachment.php DownloadsEPSS 0.3%CVE-2025-68951MEDIUMphpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig |rawEPSS 0.3%CVE-2026-111909HIGHphpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser APIEPSS 0.3%CVE-2026-111886HIGHphpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta 2FA Brute-Force via remove-twofactor EndpointEPSS 0.3%CVE-2026-32629MEDIUMphpMyFAQ: Stored XSS via Unsanitized Email Field in Admin FAQ EditorEPSS 0.3%CVE-2026-45008HIGHphpMyFAQ - Path Traversal in Client::deleteClientFolder via URL ParameterEPSS 0.3%CVE-2026-111902MEDIUMphpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments APIEPSS 0.3%CVE-2026-46359HIGHphpMyFAQ - SQL Injection in CurrentUser::setTokenData via Unescaped OAuth Token FieldsEPSS 0.3%CVE-2026-56738HIGHphpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word InsertionEPSS 0.3%CVE-2026-45007MEDIUMphpMyFAQ - Missing Permission Check on 12 Configuration API Endpoints Allows Information DisclosureEPSS 0.3%CVE-2026-111888MEDIUMphpMyFAQ 4.0.0 before 4.1.9 Incorrect Authorization via news update APIEPSS 0.3%CVE-2026-111889MEDIUMphpMyFAQ 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Authorization via Admin DashboardEPSS 0.3%CVE-2026-111900MEDIUMphpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Draft FAQ Attachment Disclosure via attachment.phpEPSS 0.3%CVE-2026-47132MEDIUMphpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User EnumerationEPSS 0.3%CVE-2026-34729MEDIUMphpMyFAQ: Stored XSS via Regex Bypass in Filter::removeAttributes()EPSS 0.3%CVE-2026-46367HIGHphpMyFAQ - Stored XSS via Utils::parseUrl() in Comment RenderingEPSS 0.2%CVE-2026-56736HIGHphpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ SubmissionEPSS 0.2%