GHSA-3q28-xfw3-2q35MediumCVSS 6.1

phpMyAdmin XSS Vulnerability

Published
May 17, 2022
Last Modified
November 2, 2023

🔗 CVE IDs covered (1)

CVE-2016-5732 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in the partition-range implementation in templates/table/structure/display_partitions.phtml in the table-structure page in phpMyAdmin 4.6.x before 4.6.3 allow remote attackers to inject arbitrary web script or HTML via crafted table parameters.

🎯 Affected products1

  • composer/phpmyadmin/phpmyadmin:>= 4.6.0, < 4.6.3

🔗 References (6)