CVE-2025-68951
1 advisory.
Packagist/thorsten/phpmyfaq CVE-2025-68951: medium 5.4, EPSS 0.28%
phpMyFAQ has Stored XSS in user list via admin-managed display_name
Action: Upgrade thorsten/phpmyfaq to 4.0.16 or later.
composer require thorsten/phpmyfaq:4.0.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.14 | 4.0.16 | - |
Fixed versions
| 4.0.16 |
Sources
- osv: GHSA-jv8r-hv7q-p6vc
- https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-jv8r-hv7q-p6vc
- https://nvd.nist.gov/vuln/detail/CVE-2025-68951
- https://github.com/thorsten/phpMyFAQ/commit/61829e83411f7b28bc6fd1052bfde54c32c6c370
- https://github.com/thorsten/phpMyFAQ/commit/8211d1d25951b4c272443cfc3ef9c09b1363fd87
- https://github.com/thorsten/phpMyFAQ
CVE-2025-68951 · published · modified · JSON