medium6.4
CVE-2025-24530
phpMyAdmin XSS when checking tables
Impact
An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | phpmyadmin/phpmyadmin | >= 5.0.0, < 5.2.2 | 5.2.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| PhpMyAdmin | PhpMyAdmin 5.X | before 5.2.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://www.phpmyadmin.net/security/PMASA-2025-1/
- https://lists.debian.org/debian-lts-announce/2025/04/msg00016.html
- https://github.com/advisories/GHSA-222v-cx2c-q2f5
- https://nvd.nist.gov/vuln/detail/CVE-2025-24530
- https://www.phpmyadmin.net/security/PMASA-2025-1
- https://github.com/phpmyadmin/phpmyadmin/commit/23c13a81709728089ff031e5b1c29b5e91baa6a7