Skip to content

phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering

Moderate severity GitHub Reviewed Published Apr 28, 2026 in thorsten/phpMyFAQ • Updated May 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts