XSS Vulnerability in phpMyAdmin Affects Multiple Versions by phpMyAdmin
CVE-2025-24529

6.4MEDIUM

Key Information:

Vendor

PHPmyadmin
Status
PHPmyadmin
Vendor
CVE Published:
23 January 2025

What is CVE-2025-24529?

A Cross-Site Scripting (XSS) vulnerability has been identified in phpMyAdmin versions prior to 5.2.2, specifically affecting the Insert tab. This flaw can be exploited by attackers to inject malicious scripts into web pages viewed by users, potentially leading to unauthorized actions or data exposure. It's crucial for users of affected versions to apply the latest updates to mitigate risks associated with this vulnerability.

Affected Version(s)

phpMyAdmin 5.0.0 < 5.2.2

References

https://www.phpmyadmin.net/security/PMASA-2025-2/

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.