[HIGH] phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

PKSA-xsdh-jbbj-vv28 CVE-2026-56736 GHSA-pgwp-vc7q-cvj3

Affected package: thorsten/phpmyfaq

Affected version: <4.2.0-alpha

Reported by:
GitHub