[MEDIUM] phpMyFAQ has Stored XSS in FAQ Question/Answer via Encode-Decode Bypass of removeAttributes() Sanitization

PKSA-6zc3-3brt-ftsh CVE-2026-46363 GHSA-f5p7-2c9q-8896

Affected package: phpmyfaq/phpmyfaq

Affected version: <=4.1.1

Reported by:
GitHub