[MEDIUM] phpMyFAQ has stored XSS via | raw Filter in search.twig — html_entity_decode(strip_tags()) Bypass in Search Result Rendering

PKSA-198b-7kr6-ksdh CVE-2026-46361 GHSA-pqh6-8fxf-jx22

Affected package: thorsten/phpmyfaq

Affected version: <=4.1.1

Reported by:
GitHub