What is GHSA-jqpp-mfm2-hfw2?

GHSA-jqpp-mfm2-hfw2 is a security advisory published by GitHub Security Advisories with Medium severity. phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child...

Which CVE IDs does GHSA-jqpp-mfm2-hfw2 cover?

GHSA-jqpp-mfm2-hfw2 covers the following CVE IDs: CVE-2026-76215. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jqpp-mfm2-hfw2?

GHSA-jqpp-mfm2-hfw2 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-jqpp-mfm2-hfw2MediumCVSS 5.3

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-76215 →

📋 Description

phpMyFAQ before 4.1.7 fails to apply parent FAQ visibility checks before returning child resources including comments and attachments. Unauthenticated attackers can retrieve restricted comment text, commenter email addresses, and attachment filenames for FAQ records they cannot directly access by querying the comments and attachments API endpoints.

🔗 References (4)

https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-jmv9-23mw-mxpq
https://nvd.nist.gov/vuln/detail/CVE-2026-76215
https://www.vulncheck.com/advisories/phpmyfaq-before-missing-authorization-via-child-resources
https://github.com/advisories/GHSA-jqpp-mfm2-hfw2