phpPgAdmin Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in phpPgAdmin versions through 7.13.0. This issue arises because user-supplied input from $_REQUEST parameters is not properly encoded or sanitized before being reflected in the HTML output. The vulnerability is present in several components, including sequences.php, indexes.php, admin.php, and potentially other unspecified files. An attacker could exploit this vulnerability to execute arbitrary JavaScript in the context of the victim's browser, leading to possible session hijacking, credential theft, or other malicious actions.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can execute malicious scripts in the context of the user's session.