Description
Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by injecting arbitrary JavaScript or HTML in a (1) db or (2) table parameter value followed by an uppercase </SCRIPT> end tag, which bypasses the protection against lowercase </script>.
Remediation
References
Related Vulnerabilities
WordPress Plugin Frontend File Manager Multiple Vulnerabilities (21.2)
WordPress Plugin Login/Signup Popup (Inline Form + Woocommerce) Cross-Site Request Forgery (2.2)
WordPress Plugin Fancy Comments WordPress Cross-Site Scripting (1.2.10)
WordPress Plugin Fast Secure Contact Form Remote Code Execution (4.0.44)
WordPress Plugin Sermon Browser Multiple Cross-Site Scripting Vulnerabilities (0.45.15)