Lucene search

K
osvGoogleOSV:GHSA-3P87-W3C5-27GF
HistoryMay 17, 2022 - 4:19 a.m.

phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save

2022-05-1704:19:07
Google
osv.dev
4
phpmyadmin
xss
vulnerabilities
inline editing

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

49.5%

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

49.5%