GHSA-vxj6-pm6r-23hqMediumCVSS 6.1

phpMyAdmin XSS Vulnerability

Published
May 14, 2022
Last Modified
July 25, 2023

🔗 CVE IDs covered (1)

CVE-2018-12581 →

📋 Description

An issue was discovered in js/designer/move.js in phpMyAdmin before 4.8.2. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted database name to trigger an XSS attack when that database is referenced from the Designer feature.

🎯 Affected products1

  • composer/phpmyadmin/phpmyadmin:< 4.8.2

🔗 References (6)