Description

Cross-site scripting (XSS) vulnerability in examples/openid.php in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving an OpenID error message.

Remediation

References

CVE-2016-5731

Related Vulnerabilities

WordPress Plugin Aviary Image Editor Add-on For Gravity Forms Arbitrary File Upload (3.0)

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Unspecified Vulnerability (2.4.3)

Squid Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-8450)

WordPress Plugin Yet Another Photoblog Unspecified Vulnerability (1.10.6)

WordPress Plugin Ajax BootModal Login Security Bypass (1.4.3)

Severity

Medium

Classification

CVE-2016-5731 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities