CVE-2026-76210

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7

Description Insufficient sanitization of HTML in FAQ answers occurs before generating PDFs via TCPDF. An attacker with permissions to create or edit FAQ content can embed an <img> tag with a src attribute referencing a local file within the web root's content/ directory, such as content/core/config/database.php. During PDF generation, the application attempts to read the referenced file; since the file is not a valid image, an uncaught exception is triggered. The resulting stack trace discloses portions of the file's contents to any user triggering the PDF export. While the disclosed content is typically truncated by the zend.exception string param max len setting, a higher configured value may lead to the disclosure of entire files, including database credentials.

Recommendations Update phpMyFAQ to version 4.1.7 or later.