Lucene search

K
osvGoogleOSV:GHSA-Q586-XPWR-JC3J
HistoryMay 14, 2022 - 2:05 a.m.

phpMyAdmin cross-site scripting vulnerability in crafted view name

2022-05-1402:05:29
Google
osv.dev
22
cross-site scripting
phpmyadmin
vulnerability
view operations
web script
html
authenticated users
crafted view name
functions.js
software

EPSS

0.001

Percentile

47.1%

A cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.