Description

Cross-site scripting (XSS) vulnerability in libraries/plugins/transformations/abstract/TextLinkTransformationsPlugin.class.php in phpMyAdmin 4.0.x before 4.0.4.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted object name associated with a TextLinkTransformationPlugin link.

Remediation

References

CVE-2013-5001

Related Vulnerabilities

WordPress Plugin WP Subtitle Unspecified Vulnerability (2.5)

WordPress Plugin Author Stats Cross-Site Scripting (1.3)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7741)

MySQL Out-of-bounds Write Vulnerability (CVE-2009-4484)

PHP-Fusion Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-14960)

Severity

Low

Classification

CVE-2013-5001 CWE-707

Tags

Missing Update Known Vulnerabilities