Description
Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an invalid SQL CREATE VIEW statement with a crafted name that triggers an error message.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple Banner Cross-Site Scripting (2.10.3)
WordPress Plugin qTranslate Cross-Site Scripting (2.5.39)
WordPress Plugin Affiliates Multiple Cross-Site Scripting Vulnerabilities (2.13.1)
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Cross-Site Scripting (1.3.6.2)
Django Improper Verification of Cryptographic Signature Vulnerability (CVE-2026-6873)