1 matches found
CVE-2026-34973: Improper Neutralization of Special Elements in Data Query Logic
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the searchCustomPages method in phpmyfaq/src/phpMyFAQ/Search.php uses realescapestring via escape to sanitize the search term before embedding it in LIKE clauses. However, realescapestring does not escape SQL LIKE...
6.9CVSS5.8AI score0.00385EPSS
SaveExploits1References3
20