CVE-2026-34974

5.4 mediumEPSS 0.2%

Medium (5.4) in phpmyfaq phpmyfaq. EPSS 0.2% chance of exploitation in the next 30 days.

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the regex-based SVG sanitizer in phpMyFAQ (SvgSanitizer.php) can be bypassed using HTML entity encoding in javascript: URLs within SVG <a href> attributes. Any user with edit_faq permission can upload a malicious SVG that executes arbitrary JavaScript when viewed, enabling privilege escalation from editor to full admin takeover. This issue has been patched in version 4.1.1.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-04-02
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

Affected

phpmyfaq:phpmyfaq

References

https://github.com/thorsten/phpMyFAQ/releases/tag/4.1.1
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-5crx-pfhq-4hgg
https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-5crx-pfhq-4hgg

Check your stack JSON