[MEDIUM] phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration

PKSA-cz4f-38kk-4ywj CVE-2026-47132 GHSA-6pvm-2vjj-rx4w

Affected package: thorsten/phpmyfaq

Affected version: <4.2.0-alpha

Reported by:
GitHub