CVE-2026-111896 | thorsten phpMyFAQ 4.2.0-alpha SVG file SvgSanitizer cross site scripting

October 17, 2026 Yanac

A vulnerability identified as problematic has been detected in thorsten phpMyFAQ 4.2.0-alpha. This affects the function SvgSanitizer of the component SVG file Handler. Performing a manipulation results in cross site scripting.

This vulnerability is known as CVE-2026-111896. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More