thorsten/phpmyfaq vulnerable to cross-site scripting

thorsten/phpmyfaq prior to 3.1.14 is vulnerable to a stored cross-site scripting attack perpetuated by an actor logged in as admin...