CVE-2026-76212

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7

Description When configured to use PostgreSQL via the native pgsql PHP extension, the software declares an incorrect LIKE ESCAPE character ('=') in the Search/Database/Pgsql.php backend, while the escapeLikeWildcards() function escapes user input with the '|' prefix. This discrepancy makes wildcard escaping ineffective, allowing user-supplied % and characters to remain active as LIKE wildcards. An unauthenticated attacker can use these characters in the public FAQ search form to trigger broad pattern matches and expensive sequential scans, leading to a denial of service. This issue does not allow for SQL injection or data exfiltration as quotes remain escaped.

Recommendations Update phpMyFAQ to version 4.1.7 or later.