CVE-2026-116182

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.10

Description The PDF export feature allows for server-side request forgery (SSRF), a condition where the server is coerced into making requests to an unintended location. This occurs when the system fetches external images referenced in FAQ answers. An attacker capable of influencing FAQ content can embed image URLs pointing to loopback or internal services, leading the server to request these resources and embed the responses within the generated PDF files.

Recommendations Update to version 4.1.10 or later.