[XSS] I found a xss in phpmyadmin 3.3.0 when we create new database in interface!

there is a xss in phpmyadmin 3.3.0 when we create new database in interface, the "newdb" parameter do not filter characters when users enter. attacker can enter malicious code, like "scriptalert/liscker/;/script". it also can be true in post and get. but in post, we can not encode xss code, or ,...