GHSA-5gh4-v2ch-pcx4
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | phpmyadmin/phpmyadmin | >= 3.5, < 3.5.8.2 | 3.5.8.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.
References
External links from the advisory. They lead to third-party sites.