-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| phpmyadmin/phpmyadmin | composer | >= 4.6, < 4.6.4 | 4.6.4 |
The vulnerability manifests in two documented features: database privilege checks and partition removal. Both require handling user-controlled database names. XSS occurs when these names are rendered without proper HTML escaping. The functions responsible for generating UI elements in these workflows (privilege management and partition operations) would be the logical points of vulnerability. While exact function names aren't explicitly listed in advisories, phpMyAdmin's architecture and standard practice for XSS vulnerabilities strongly suggest these are the affected components.
A Semantic Attack on Google Gemini - Read the Latest Research