CVE-2026-119563 phpMyAdmin through 5.2.3 Stored XSS via Designer Query History Table Name

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display. Attackers can create a table whose name contains HTML markup that executes in another user's sessio...