Description

phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.

Remediation

References

CVE-2020-26934

Related Vulnerabilities

WordPress Plugin Memphis Documents Library Multiple Unspecified Vulnerabilities (3.6.21)

Ruby Use of Externally-Controlled Format String Vulnerability (CVE-2017-0898)

IBM WebSEAL CVE-2019-4145 Vulnerability (CVE-2019-4145)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.11)

Oracle Database Server Resource Management Errors Vulnerability (CVE-2007-5506)

Severity

Medium

Classification

CVE-2020-26934 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities