Description

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, there is a stored XSS vulnerability via Regex Bypass in Filter::removeAttributes(). This issue has been patched in version 4.1.1.

Remediation

References

CVE-2026-34729

Related Vulnerabilities

IBM RTC Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-6129)

Oracle JRE CVE-2019-2999 Vulnerability (CVE-2019-2999)

XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-13654)

Cherokee Improper Input Validation Vulnerability (CVE-2009-4489)

Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2026-34729