VDB
CVE-2025-24530
CVE-2025-24530
PUBLISHED
An issue was discovered in phpMyAdmin 5.x before 5.2.2. An XSS vulnerability has been discovered for the check tables feature. A crafted table or database name could be used for XSS.
EPSS 0.30% · 54.1th percentile
Risk Scores
EPSS Score
0.30%
54.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | phpmyadmin | 5.0.0 |
| Bitnami | phpmyadmin | 5.0.0 |
Exploit Intelligence
- CIRCL seen: CVE-2025-24530 (circl-sighting)
- CIRCL seen: CVE-2025-24530 (circl-sighting)
- CIRCL seen: CVE-2025-24530 (circl-sighting)
- https://lists.debian.org/debian-lts-announce/2025/04/msg00016.html (circl)
- https://www.phpmyadmin.net/security/PMASA-2025-1/ (circl)
Timeline
- Jan 21, 2025 CVE Published
- Jan 23, 2025 PoC Published
- Jan 23, 2025 PoC Published
- Jan 24, 2025 EPSS Score
- Jan 26, 2025 PoC Published
- Feb 8, 2025 EPSS Score
- Feb 23, 2025 EPSS Score
- Feb 28, 2025 Coalition ESS Score
- Mar 11, 2025 EPSS Score
- Mar 26, 2025 EPSS Score
- Apr 8, 2025 CVE Updated
- Apr 10, 2025 EPSS Score