CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export

phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...

MINI-JM6M-52VR-R678

Bulletin has no description...

MINI-HM6M-52WH-8H85

Bulletin has no description...

MINI-2R8R-F5GJ-W6XR

Bulletin has no description...

MINI-QPF2-JVR3-H86X

Bulletin has no description...

MINI-CPF9-WVHM-FFQR

Bulletin has no description...

MINI-23PW-QW2M-C849

Bulletin has no description...

MINI-CR7P-M8WJ-W8MF

Bulletin has no description...

MINI-43R8-2JV9-2MM3

Bulletin has no description...

MINI-XC55-QFXG-J6JH

Bulletin has no description...

MINI-J6X3-QMP9-W7JH

Bulletin has no description...

MINI-28VM-VX4P-HGWW

Bulletin has no description...

MINI-JHXC-CXCH-5CC7

Bulletin has no description...

MINI-JFQW-Q62M-H2RW

Bulletin has no description...

MINI-543J-WPQV-P6QM

Bulletin has no description...

MINI-FJ89-W3QC-XGHW

Bulletin has no description...

MINI-HH33-XF2Q-6G54

Bulletin has no description...

MINI-G3C3-5V25-P4C2

Bulletin has no description...

MINI-PQQV-XMMR-9MF6

Bulletin has no description...

MINI-MPVJ-W82C-X9MC

Bulletin has no description...