CVE-2025-2946

Critical CVSS: 9.1

pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.

Vendor

Pgadmin

Product

Pgadmin 4

CWE

CWE-79

Yayın Tarihi

2025-04-03 13:15:43

Güncelleme

2025-04-23 22:24:39

Source Identifier

f86ef6dc-4d3a-42ad-8f28-e6d5547a5007

KEV Date Added

Kategoriler

CWE-79 Pgadmin 4 CRITICAL Pgadmin 2025

Referanslar

https://github.com/pgadmin-org/pgadmin4/issues/8602

Benzer Kayıtlar

High

CVE-2026-1707

pgAdmin versions 9.11 are affected by a Restore restriction bypass via key disclosure vulnerability that occurs when run…

Critical

CVE-2025-13780

pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serv…

High

CVE-2025-12765

pgAdmin

Critical

CVE-2025-12762

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in serve…

Medium

CVE-2025-12763

pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused…

High

CVE-2025-12764

pgAdmin