Cross-site scripting (XSS) vulnerability in import.php in phpMyAdmin before 4.1.7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename in an import action. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
PHP
XSS
Phpmyadmin
NVD
GitHub
CVSS 2.0
3.5
EPSS
0.2%