[MEDIUM] phpMyFAQ has a SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS

PKSA-sw8q-jkxw-m11r CVE-2026-46360 GHSA-whqh-9pq5-c7r3

Affected package: thorsten/phpmyfaq

Affected version: <=4.1.1

Reported by:
GitHub