How many CVEs have patched create?

5 published CVEs changed create in thorsten/phpMyFAQ, in 7 distinct patches totalling 40 changed lines, between 2022 and 2026.

What is the latest CVE that changed create?

CVE-2026-56736 (phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission), published 2026-09-24, changed lines 111 to 115 of phpmyfaq/src/phpMyFAQ/Controller/Frontend/Api/FaqController.php.

How does create compare to the rest of thorsten/phpMyFAQ?

thorsten/phpMyFAQ has 106 CVEs with a located fix in total; 5 of them changed create.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

thorsten/phpMyFAQ

Function

7 files

create

Name: create in thorsten/phpMyFAQ: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 7 files

Last patched September 24, 2026

5

CVEs

That changed this function

7

Distinct patches

Backports counted once

40

Lines changed

Added plus removed

2022–2026

Years

By CVE publication date

Overview

create in thorsten/phpMyFAQ was changed by 5 published CVE fixes between 2022 and 2026, in 7 distinct patches that added or removed 40 lines in total.

The name occurs in 7 files: phpmyfaq/src/phpMyFAQ/Controller/Api/CategoryController.php, phpmyfaq/src/phpMyFAQ/Controller/Api/QuestionController.php, phpmyfaq/src/phpMyFAQ/Faq.php, phpmyfaq/src/phpMyFAQ/Controller/Api/FaqController.php, phpmyfaq/src/phpMyFAQ/Export.php, phpmyfaq/src/phpMyFAQ/Controller/Frontend/Api/FaqController.php, phpmyfaq/src/phpMyFAQ/Controller/Frontend/RegistrationController.php.

thorsten/phpMyFAQ has 106 CVEs with a located fix in total, so 5% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed create, newest first, with the lines each fix touched.

phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
CVE-2026-56736 · phpmyfaq/src/phpMyFAQ/Controller/Frontend/Api/FaqController.php · lines 111–115 · +5 −1
High · CVSS 8.2
EPSS 0.2%2026-09-24
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
CVE-2026-49205 · phpmyfaq/src/phpMyFAQ/Controller/Api/CategoryController.php · line 185 · +2 −0 in 2 hunks
Medium · CVSS 6.5
EPSS 0.4%2026-06-18
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
CVE-2026-49205 · phpmyfaq/src/phpMyFAQ/Controller/Api/FaqController.php · line 579 · +2 −0 in 2 hunks
Medium · CVSS 6.5
EPSS 0.4%2026-06-18
phpMyFAQ: Missing userHasPermission() in 4 API write endpoints (CVE-2026-24421 Incomplete Fix)
CVE-2026-49205 · phpmyfaq/src/phpMyFAQ/Controller/Api/QuestionController.php · line 96 · +2 −0 in 2 hunks
Medium · CVSS 6.5
EPSS 0.4%2026-06-18
phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality
CVE-2025-62519 · phpmyfaq/src/phpMyFAQ/Controller/Frontend/RegistrationController.php · line 42 · +1 −1
High · CVSS 7.2
EPSS 0.7%2025-11-17
phpMyFAQ SQL injections at insertentry & saveentry
CVE-2024-28107 · phpmyfaq/src/phpMyFAQ/Faq.php · lines 928–934 · +4 −4 in 2 hunks
High · CVSS 8.8
EPSS 1.0%2024-03-25
Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
CVE-2022-3608 · phpmyfaq/src/phpMyFAQ/Export.php · lines 52–59 · +7 −11
High · CVSS 8.4
EPSS 1.0%2022-10-19

Get an alert when the next CVE fix lands in thorsten/phpMyFAQ, with the patched functions.

Monitor phpMyFAQ CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in thorsten/phpMyFAQ changed by the most CVE fixes.

ajax3 CVEs · phpmyfaq/admin/assets/js/tags.js getNews3 CVEs · phpmyfaq/src/phpMyFAQ/News.php cleanUpContent3 CVEs · phpmyfaq/src/phpMyFAQ/Helper/FaqHelper.php updateNewsEntry2 CVEs · phpmyfaq/src/phpMyFAQ/News.php addNewsEntry2 CVEs · phpmyfaq/src/phpMyFAQ/News.php createOverview2 CVEs · phpmyfaq/src/phpMyFAQ/Helper/FaqHelper.php

All patched functions in thorsten/phpMyFAQ

Frequently asked questions

Common questions about CVE fixes to create.

How many CVEs have patched create?: 5 published CVEs changed create in thorsten/phpMyFAQ, in 7 distinct patches totalling 40 changed lines, between 2022 and 2026.
What is the latest CVE that changed create?: CVE-2026-56736 (phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission), published 2026-09-24, changed lines 111 to 115 of phpmyfaq/src/phpMyFAQ/Controller/Frontend/Api/FaqController.php.
How does create compare to the rest of thorsten/phpMyFAQ?: thorsten/phpMyFAQ has 106 CVEs with a located fix in total; 5 of them changed create.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track thorsten/phpMyFAQ CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing