[HIGH] phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality

PKSA-zh4p-vq78-zndy CVE-2025-62519 GHSA-fxm2-cmwj-qvx4

Affected version: <=4.0.13

Reported by:
GitHub

[MEDIUM] thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames

PKSA-nm7m-ddfs-x1rd CVE-2024-55889 GHSA-m3r7-8gw7-qwvc

Affected version: <3.2.10

Reported by:
GitHub

[HIGH] phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available

PKSA-zk9c-crx1-g563 CVE-2024-54141 GHSA-vrjr-p3xp-xx2x

Affected version: <4.0.0

Reported by:
GitHub