Description
Cross-site scripting (XSS) vulnerability in the format function in libraries/sql-parser/src/Utils/Error.php in the SQL parser in phpMyAdmin 4.5.x before 4.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.
Remediation
References
Related Vulnerabilities
WordPress Plugin Debug Log Manager Cross-Site Request Forgery (2.2.1)
WordPress Plugin Download Shortcode Arbitrary File Disclosure (0.1)
Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-0826)
WordPress Plugin Easy Modal Multiple SQL Injection Vulnerabilities (2.0.17)
WordPress Plugin Contact Form Manager Multiple Vulnerabilities (1.4.4)