CVE-2026-34729 in phpMyFAQ
Сводка (Английский)
phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, there is a stored XSS vulnerability via Regex Bypass in Filter::removeAttributes(). This issue has been patched in version 4.1.1.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Ответственный
GitHub_M
Резервировать
30.03.2026
Раскрытие
02.04.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354889 | thorsten phpMyFAQ removeAttributes межсайтовый скриптинг | 79 | Не определено | Официальное исправление | CVE-2026-34729 |