phpMyAdmin Cross-Site Scripting Vulnerability in Check Tables Feature

A cross-site scripting (XSS) vulnerability exists in phpMyAdmin versions 5.x prior to 5.2.2. The issue arises in the 'Check tables' feature, where a crafted table or database name can be used to execute an XSS attack.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade to phpMyAdmin version 5.2.2 or newer. The specific commit that addresses this vulnerability is available on the phpMyAdmin GitHub repository.