[HIGH] phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission

PKSA-rrfb-2zp9-ws1j CVE-2026-56736 GHSA-pgwp-vc7q-cvj3

Affected package: phpmyfaq/phpmyfaq

Affected version: <4.2.0-alpha

Reported by:
GitHub