[MEDIUM] phpMyFAQ has a SVG Sanitizer Entity Decoding Depth Limit Bypass Leading to Stored XSS

PKSA-jn65-sph2-9wn9 CVE-2026-46360 GHSA-whqh-9pq5-c7r3

Affected package: phpmyfaq/phpmyfaq

Affected version: <=4.1.1

Reported by:
GitHub