CVE-2026-109573 phpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search Endpoint

Versions of phpMyFAQ prior to 4.1.9 are vulnerable to an SQL injection via the api/autocomplete search endpoint. The root cause lies in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB operate in NO_BACKSLASH_ESCAPES mode. Unauthent...