A flaw in phpMyFAQ allows authenticated users with ordinary accounts to reach administrative API endpoints because the system only verifies that the user is logged in, not that they possess administrator privileges (CWE‑863). By requesting these endpoints, an attacker can obtain vulnerable administrative information such as dashboard versions, LDAP configuration details, Elasticsearch statistics, and health‑check data.

The vulnerability affects installations of phpMyFAQ older than version 4.1.2. Users running these releases should be aware of the issue.

The CVSS score of 5.3 indicates a moderate to high severity. The EPSS score is <1%, showing a very low but non‑zero likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires the attacker to hold a valid authenticated frontend account; after logging in, the attacker can send requests to the protected admin API endpoints and retrieve sensitive information. No remote code execution or denial‑of‑service impact is disclosed.