CVE-2026-45007

CVE-2026-45007 affects phpMyFAQ prior to 4.1.2. In ConfigurationTabController.php, 12 endpoints perform userIsAuthenticated() checks instead of validating permission with userHasPermission(CONFIGURATION_EDIT), enabling information disclosure. Any authenticated user can enumerate configuration met...

CVE-2026-45007

creationtimestamp| type| source ---|---|--- 2026-05-06 20:24:39+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rm98-82fr-mcfx...