Description
Cross-site scripting (XSS) vulnerability in the view operations page in phpMyAdmin 4.1.x before 4.1.14.3 and 4.2.x before 4.2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted view name, related to js/functions.js.
Remediation
References
Related Vulnerabilities
WordPress Plugin Google Authenticator Unspecified Vulnerability (0.47)
WordPress Plugin FormGet Contact Form Cross-Site Scripting (5.3)
Apache Traffic Server Improper Authentication Vulnerability (CVE-2021-44759)
Drupal Core 8.7.0 Directory Traversal (8.7.0)
Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2018-12015)