https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T21:47:54.555120+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116182 fkie_cve-2026-116182 2026-10-26T21:47:54.572261+00:00

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content can embed image URLs pointing to loopback or internal services, causing the server to request them and embed responses in generated PDFs.

 https://db.gcve.eu/vuln/ghsa-qxg5-vwcr-vrfc GHSA-qxg5-vwcr-vrfc 2026-10-26T21:47:54.572328+00:00

phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content can embed image URLs pointing to loopback or internal services, causing the server to request them and embed responses in generated PDFs.