CVE-2026-111894 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha cleanUpContent cross site scripting

October 17, 2026 Yanac

A vulnerability was found in thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha. It has been declared as problematic. Impacted is the function FaqHelper::cleanUpContent of the component FAQ. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-111894. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More