CVE-2026-119563

A flaw was found in phpMyAdmin. This stored cross-site scripting XSS vulnerability allows an authenticated database user with table creation privileges to execute arbitrary script in another user's browser session. By creating a database table with a name containing malicious markup, the unescape...

CVE-2026-119563

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display. Attackers can create a table whose name contains HTML markup that executes in another user's sessio...

CVE-2026-119563: phpMyAdmin: phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE…

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display. Attackers can create a table whose name contains HTML markup that executes in another user's sessio...

PT-2026-133501

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display. Attackers can create a table whose name contains HTML markup that executes in another user's sessio...