[thorsten/phpmyfaq] thorsten/phpmyfaq vulnerable to authentication bypass

thorsten/phpmyfaq prior to 3.1.12 is vulnerable to authentication bypass by capture-relay that allows unlimited comments to be sent. This has been fixed in 3.1.12.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-1886
• https://github.com/thorsten/phpmyfaq/commit/27eaaae16850694634ac52416a0bd38b35d7330a
• https://huntr.dev/bounties/b7d244b7-5ac3-4964-81ee-8dbb5bb5e33a
• https://github.com/advisories/GHSA-4cr4-x82x-hwm9