Thorsten vulnerabilities
178 CVEs and advisories name Thorsten as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-24421phpMyFAQ missing authorization exposes /api/setup/backup to any authenticated user
- CVE-2025-69200phpMyFAQ has unauthenticated config backup download via /api/setup/backup
- CVE-2025-68951phpMyFAQ has stored XSS in admin "List of users" via display_name HTML entity decoding (html_entity_decode) + Twig |raw
- CVE-2025-62519phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
- CVE-2025-59943phpMyFAQ duplicate email registration allows multiple accounts with the same email
- CVE-2024-56199phpMyFAQ Vulnerable to Stored HTML Injection at FAQ
- CVE-2024-55889phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames
- CVE-2024-54141phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
- CVE-2024-29196phpMyFAQ Path Traversal in Attachments
- CVE-2024-29179phpMyFAQ Stored Cross-site Scripting at File Attachments
- CVE-2024-28108phpMyFAQ Stored HTML Injection at contentLink
- CVE-2024-28107phpMyFAQ SQL injections at insertentry & saveentry
- CVE-2024-28106phpMyFAQ Stored XSS at FAQ News Content
- CVE-2024-28105phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
- CVE-2024-27300phpMyFAQ Stored XSS at user email
- CVE-2024-27299phpMyFAQ SQL Injection at "Save News"
- CVE-2024-24574phpMyFAQ vulnerable to stored XSS on attachments filename
- CVE-2024-22208phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
- CVE-2024-22202User Removal Page Allows Spoofing Of User Details
- CVE-2023-6890Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-6889Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5866Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq
- CVE-2023-5867Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5865Insufficient Session Expiration in thorsten/phpmyfaq
- CVE-2023-5864Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5863Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2023-5320Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
- CVE-2023-5317Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5316Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
- CVE-2023-5319Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq