CVE-2024-55889: thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames

A vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim’s machine upon page visit by embedding it in an element without user interaction or explicit consent.