medium5.4
CVE-2025-63947
A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file.
Impact
A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craigtaub | Phpmsadmin | Version 2.2 |