In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15731.json"