A vulnerability classified as problematic was found in thorsten phpMyFAQ up to 4.1.1. This impacts an unknown function of the component FAQ Endpoint. Executing a manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2026-46363. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is advised.