What is GHSA-7wx9-j8xm-mjmq?

GHSA-7wx9-j8xm-mjmq is a security advisory published by GitHub Security Advisories with Medium severity. phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint,...

Which CVE IDs does GHSA-7wx9-j8xm-mjmq cover?

GHSA-7wx9-j8xm-mjmq covers the following CVE IDs: CVE-2026-76206. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7wx9-j8xm-mjmq?

GHSA-7wx9-j8xm-mjmq has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-7wx9-j8xm-mjmqMediumCVSS 5.3

phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint,...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-76206 →

📋 Description

phpMyFAQ versions before 4.1.7 fail to validate active status in the PDF export endpoint, allowing unauthenticated attackers to retrieve draft FAQ metadata. Attackers can access the public PDF export route with sequential FAQ identifiers to obtain titles, solution IDs, author names, and last-update timestamps of inactive or unpublished FAQs.

🔗 References (4)

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-f8pr-32pp-mp7h
https://nvd.nist.gov/vuln/detail/CVE-2026-76206
https://www.vulncheck.com/advisories/phpmyfaq-before-information-disclosure-via-pdf-export
https://github.com/advisories/GHSA-7wx9-j8xm-mjmq