CVE-2026-93957

CVE-2026-93957 affects olivier-ls PHP-FTS up to version 1.1.3. The vulnerability resides in the SearchEngine::matchesSingleFilter function within src/SearchEngine.php, part of the Filter Matching component. The root cause is an incorrect comparison (loose comparison leading to a filter bypass, CW...

EUVD-2026-83636

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

EUVD-2026-83622

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...

CVE-2026-93956

CVE-2026-93956 is a cross-site scripting (XSS) vulnerability in the SearchEngine::buildHighlights function of src/SearchEngine.php in the PHP-FTS library (olivier-ls/php-fts) versions up to 1.1.2 . Manipulating the Query argument allows an attacker to inject malicious scripts, which execute in th...