thorsten

Top products

The 15 most recently published vulnerabilities affecting thorsten.

• CVE-2026-47132phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration5.4Sep 24, 2026
• CVE-2026-56738phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word InsertionSep 24, 2026
• CVE-2026-56737phpMyFAQ's two-factor authentication login bypasses the password factor8.1Sep 24, 2026
• CVE-2026-56736phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission8.2Sep 24, 2026
• CVE-2026-85593phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode5.4Sep 4, 2026
• CVE-2026-85592phpMyFAQ before 4.1.8 Authorization Bypass via question/create3.7Sep 4, 2026
• CVE-2026-85590phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor DisableSep 4, 2026
• CVE-2026-85591phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password ChangeSep 4, 2026
• CVE-2026-85589phpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard APISep 4, 2026
• CVE-2026-85588phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data ExportSep 4, 2026
• CVE-2026-85587phpMyFAQ before 4.1.8 Incorrect Authorization via Admin PagesSep 4, 2026
• CVE-2026-85586phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterSep 4, 2026
• CVE-2026-76215phpMyFAQ before 4.1.7 Missing Authorization via child resources5.3Aug 19, 2026
• CVE-2026-76214phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge7.4Aug 19, 2026
• CVE-2026-76213phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle7.4Aug 19, 2026