CVE-2025-24530
An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS.
- Update to 5.2.2
Published Updated
PatchFirst · Latest vulnerabilities
phpmyadmin/phpmyadmin 5.1.3: known vulnerabilities
Known vulnerabilities affecting phpmyadmin/phpmyadmin 5.1.3: 2. Compare the fixes below with your installed release.
Vulnerabilities: 2
CVE-2023-25727
In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.
- Update to 5.2.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.