Threats tagged 'ghsa-v39r-w56f-c874'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-119563phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE Medium5.12026-10-30GCVE DatabaseCVE-2026-119563 phpMyAdmin versions up to 5.2.3 have a stored cross-site scripting (XSS) vulnerability. This flaw allows database users with CREATE privileges to inject malicious scripts via unescaped table names in the DesignerHistory.display() function. When another user interacts with the affected table name in Designer query mode, the injected script executes in their session. Report on CVE-2026-119563 Vulnerability CWE-79 #ghsa-v39r-w56f-c874	GCVE Database	2026-10-30

Page 1 of 1