[MEDIUM] phpMyFAQ: Path Traversal in Client::deleteClientFolder enables arbitrary directory deletion by non-super-admin admins

PKSA-tvkw-wcnm-h63h CVE-2026-45008 GHSA-gh9p-q46p-57g2

Affected package: phpmyfaq/phpmyfaq

Affected version: <=4.1.1

Reported by:
GitHub