CVE-2025-63947

Publication date

2025-12-18 00:00:00

Family

mitre

State

PUBLISHED

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in phpMsAdmin version 2.2 in the database_mode.php file. An attacker can execute arbitrary web script or HTML via the dbname parameter after a user is authenticated.