CVE-2023-0880: Misinterpretation of Input in thorsten/phpmyfaq

The vulnerability stems from the lack of input trimming in ajaxservice.php. The patch adds trim() to user inputs like 'name', 'email', and 'question' to prevent whitespace-only values. The original code processed these inputs via Filter::filterInput and other sanitization steps but did not trim leading/trailing whitespace. This allowed attackers to submit questions/answers with only spaces, bypassing validation. The vulnerable code resides in the procedural input-handling blocks of ajaxservice.php (e.g., under 'savequestion' and 'save' actions), where untrimmed inputs were directly used.