GHSA-8987-93fh-rcwq
phpMyAdmin Cross-site Scripting (XSS) vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | phpmyadmin/phpmyadmin | >= 4.0, < 4.8.4 | 4.8.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
In phpMyAdmin before 4.8.4, an XSS vulnerability was found in the navigation tree, where an attacker can deliver a payload to a user through a crafted database/table name.
References
External links from the advisory. They lead to third-party sites.