CVEDB API

phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.034

EPSS Ranking 86.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-26934

Opensuse » Backports Sle » Version: 15.0

cpe:2.3:a:opensuse:backports_sle:15.0
Phpmyadmin » Phpmyadmin » Version: 4.9.0

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.0
Phpmyadmin » Phpmyadmin » Version: 4.9.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.0.1
Phpmyadmin » Phpmyadmin » Version: 4.9.1

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.1
Phpmyadmin » Phpmyadmin » Version: 4.9.2

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.2
Phpmyadmin » Phpmyadmin » Version: 4.9.4

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.4
Phpmyadmin » Phpmyadmin » Version: 4.9.5

cpe:2.3:a:phpmyadmin:phpmyadmin:4.9.5
Phpmyadmin » Phpmyadmin » Version: 5.0.0

cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.0
Phpmyadmin » Phpmyadmin » Version: 5.0.1

cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.1
Phpmyadmin » Phpmyadmin » Version: 5.0.2

cpe:2.3:a:phpmyadmin:phpmyadmin:5.0.2
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Opensuse » Leap » Version: 15.2

cpe:2.3:o:opensuse:leap:15.2