https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-31T22:29:34.101196+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119563 fkie_cve-2026-119563 2026-10-31T22:29:34.119813+00:00

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user's session when they add a condition on it in Designer query mode.

 https://db.gcve.eu/vuln/ghsa-v39r-w56f-c874 GHSA-v39r-w56f-c874 2026-10-31T22:29:34.119908+00:00

phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user's session when they add a condition on it in Designer query mode.