https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:06:40.190378+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280919 EUVD-2026-280919 2026-10-06T09:06:40.240109+00:00 EUVD-2026-280919 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53929 fkie_cve-2023-53929 2026-10-06T09:06:40.240147+00:00

phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV file.

 https://cve.radiocsirt.org/vuln/ghsa-x2v3-9p22-w3x6 GHSA-x2v3-9p22-w3x6 — phpMyFAQ contains a CSV injection vulnerability 2026-10-06T09:06:40.240181+00:00

Affected: Packagist: thorsten/phpmyfaq, Packagist: phpmyfaq/phpmyfaq

phpMyFAQ 3.1.12 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into their profile names. Attackers can modify their user profile name with a payload like 'calc|a!z|' to trigger code execution when an administrator exports user data as a CSV file.