https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 03:21:32 +0000 https://db.gcve.eu/vuln/cve-2026-119563 <p><strong>Affected:</strong> phpMyAdmin</p> <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> <p><strong>Affected:</strong> phpMyAdmin</p> <p>phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE privilege to inject script via unescaped table names in DesignerHistory.display(). Attackers can create a table whose name contains HTML markup that executes in another user&#39;s session when they add a condition on it in Designer query mode.</p> https://db.gcve.eu/vuln/cve-2026-119563