In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15730.json"