THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-mf8r-wm2w-f8c5 (medium) — phpMyFAQ public FAQ APIs expose inactive FAQ content

[GHSA] GHSA-mf8r-wm2w-f8c5 (medium) — phpMyFAQ public FAQ APIs expose inactive FAQ content

medgithub_advisoriesPublished 2026-08-25

GHSA-mf8r-wm2w-f8c5 Severity: medium CVE: None

phpMyFAQ public FAQ APIs expose inactive FAQ content

## Affected Product

phpMyFAQ

## Affected Versions

- Confirmed affected: 4.1.4, API v3.1. - Confirmed affected: current main / 4.2-style source, API v4.0, for `GET /api/v4.0/faqs/tags/{tagId}` when `api.onlyActiveFaqs=true`.

## Patched Versions

4.1.5.

## Description

The public FAQ API applie

Indicators of compromise

Original source: https://github.com/advisories/GHSA-mf8r-wm2w-f8c5