[MEDIUM] phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)

PKSA-ncdr-61sw-52cy CVE-2026-49205 GHSA-8c6h-7g6x-m5x4

Affected package: phpmyfaq/phpmyfaq

Affected version: <4.1.4

Reported by:
GitHub