Description
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
Remediation
References
Related Vulnerabilities
WordPress Plugin Quick Paypal Payments Security Bypass (5.7.21)
Sqlite CVE-2019-19244 Vulnerability (CVE-2019-19244)
WordPress Plugin Stylish Cost Calculator Cross-Site Scripting (7.0.3)
Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3368)
WordPress Plugin WP REST API (WP API) Security Bypass (1.2.1)