Description
An issue was discovered in phpMyAdmin. An attacker may be able to trigger a user to download a specially crafted malicious SVG file. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Members Membership Multiple Cross-Site Scripting Vulnerabilities (2.8.9)
WordPress Plugin Injectscr Spam Injection (All)
WordPress Plugin Social Network Tabs Information Disclosure (1.7.1)
WordPress Plugin Bulk Page Creator Cross-Site Scripting (1.0.9)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-16862)