7.4
Élevée
CVE-2024-4216 pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload
Description
pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
Produits et versions touchés
Autres CVE de pgAdmin 4
Les 56 CVE de pgAdmin 4 →
CVE-2026-116252
pgAdmin 4's materialized view refresh passed the target database's name to psql's --dbname argument unchanged
6.5
Moyenne
CVE-2026-116251
pgAdmin 4 did not invalidate a user's existing sessions when their password changed, either through the user's own…
4.2
Moyenne
CVE-2026-116249
In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file…
8.4
Élevée
CVE-2026-116250
In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with…
6.5
Moyenne