Description
Cross-site scripting (XSS) vulnerability in the PMA_TRI_getRowForList function in libraries/rte/rte_list.lib.php in phpMyAdmin 4.0.x before 4.0.10.1, 4.1.x before 4.1.14.2, and 4.2.x before 4.2.6 allows remote authenticated users to inject arbitrary web script or HTML via a crafted trigger name that is improperly handled on the database triggers page.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Other Vulnerability (CVE-2003-0254)
Oracle HTTP Server CVE-2022-21271 Vulnerability (CVE-2022-21271)
WordPress Plugin Real3D FlipBook Multiple Vulnerabilities (2.18.8)
WordPress Plugin All-in-One Event Calendar Cross-Site Scripting (2.5.18)
OpenSSL Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2009-1378)