{"id":"GHSA-5gh4-v2ch-pcx4","summary":"phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities ","details":"Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving a JavaScript event in (1) an anchor identifier to setup/index.php or (2) a chartTitle (aka chart title) value.","aliases":["CVE-2013-4997"],"modified":"2023-11-01T04:45:15.966210Z","published":"2022-05-17T05:07:14Z","database_specific":{"nvd_published_at":"2013-07-31T13:20:00Z","cwe_ids":["CWE-79"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2023-08-29T18:27:59Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-4997"},{"type":"PACKAGE","url":"https://github.com/phpmyadmin/composer"},{"type":"WEB","url":"http://www.phpmyadmin.net/home_page/security/PMASA-2013-9.php"}],"affected":[{"package":{"name":"phpmyadmin/phpmyadmin","ecosystem":"Packagist","purl":"pkg:composer/phpmyadmin/phpmyadmin"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.5"},{"fixed":"3.5.8.2"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-5gh4-v2ch-pcx4/GHSA-5gh4-v2ch-pcx4.json"}}],"schema_version":"1.9.0"}