Threats tagged 'ghsa-39j8-x5gv-w8w5'

1 threat

Threats tagged 'ghsa-39j8-x5gv-w8w5'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-85589phpMyFAQ · Missing Authorization Medium5.3EPSS 0.5%2026-09-04CVE Database V5CVE-2026-85589 phpMyFAQ versions before 4.2.0-alpha.2 have a missing authorization vulnerability in the admin dashboard API endpoints 'searches' and 'content-health'. These endpoints only enforce authentication but do not check user permissions, allowing any authenticated user to access site-wide search statistics and content-health counters regardless of privilege level. EPSS 0.5%Vulnerability thorsten #ghsa-39j8-x5gv-w8w5	CVE Database V5	2026-09-04

Showing 1–1 of 1 result