Description
Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 allows remote attackers to inject arbitrary web script or HTML via a crafted request.
Remediation
References
Related Vulnerabilities
Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-6232)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61639)
Contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10642)
MySQL CVE-2018-2786 Vulnerability (CVE-2018-2786)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-7233)