CVE-2017-15735

CVE-2017-15735 describes a Cross-Site Request Forgery (CSRF) vulnerability in phpMyFAQ versions prior to 2.9.9, specifically allowing unauthorized modification of glossaries. This high-severity vulnerability, rated 8.8 CVSS, can be exploited remotely with low attack complexity, potentially leading to high impact on confidentiality, integrity, and availability if a user is tricked into performing an unintended action. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.