Description
PhpMyFaq 1.5.1 allows remote attackers to obtain sensitive information via a LANGCODE parameter that does not exist, which reveals the path in an error message.
Remediation
References
Related Vulnerabilities
MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147)
WordPress Plugin Facebook Members Cross-Site Request Forgery (5.0.4)
WordPress Plugin Ultimate Appointment Booking & Scheduling Unspecified Vulnerability (1.1.10)
Oracle HTTP Server CVE-2020-2530 Vulnerability (CVE-2020-2530)
WordPress Plugin WP-Matomo (WP-Piwik) Cross-Site Scripting (1.0.10)