[HIGH] phpMyFAQ: Missing Password Reset Token Allows Account Takeover via Username/Email Enumeration

PKSA-x1b3-f9q9-1brm GHSA-w9xh-5f39-vq89

Affected package: thorsten/phpmyfaq

Affected version: <4.1.3

Reported by:
GitHub