Information Disclosure

phpMyFAQ is vulnerable to Information Disclosure. The vulnerability is due to inconsistent access control on public FAQ API endpoints, where inactive or unpublished FAQ entries are returned without proper status validation, allowing unauthenticated attackers to access non-public FAQ content...