[thorsten/phpmyfaq] thorsten/phpmyfaq vulnerable to business logic errors

thorsten/phpmyfaq prior to 3.1.12 allows users with edit-only permissions to add and delete categories and add FAQs. This has been fixed in 3.1.12.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-1887
• https://github.com/thorsten/phpmyfaq/commit/400d9cd988d3287515c56b2ad6343026966f1a89
• https://huntr.dev/bounties/e4a58835-96b5-412c-a17e-3ceed30231e1
• https://github.com/advisories/GHSA-gx43-fqrx-6fcw