{"action":"Upgrade phpmyadmin/phpmyadmin to 4.0.10.16 or later.","affected":[{"fixed":"4.0.10.16","introduced":"4.0"},{"fixed":"4.4.15.7","introduced":"4.4"},{"fixed":"4.6.3","introduced":"4.6"}],"component":"phpmyadmin/phpmyadmin","cve_ids":["CVE-2016-5731"],"ecosystem":"Packagist","epss":0.01754,"exploited":false,"fixed_versions":["4.0.10.16","4.4.15.7","4.6.3"],"ghsa_id":"GHSA-mwm8-36c5-j5cf","id":"tcs_01M5KF5X3DF8R8KA8KNGRHVQ4E","modified_at":"2024-04-24T17:57:35.769035Z","published_at":"2022-05-14T02:08:58Z","references":["https://osv.dev/vulnerability/GHSA-mwm8-36c5-j5cf","https://nvd.nist.gov/vuln/detail/CVE-2016-5731","https://github.com/phpmyadmin/phpmyadmin/commit/418aeea3d83b0b6021bac311d849570acfc6e48c","https://github.com/phpmyadmin/phpmyadmin/commit/52e7898","https://github.com/phpmyadmin/phpmyadmin/commit/5fefa51","https://github.com/phpmyadmin/phpmyadmin/commit/78f6c54","https://github.com/phpmyadmin/phpmyadmin/commit/94cf3864254ffaf3a69e97d8fc454888368b94ab","https://github.com/phpmyadmin/phpmyadmin/commit/d005ba6","https://github.com/phpmyadmin/composer","https://security.gentoo.org/glsa/201701-32","https://www.phpmyadmin.net/security/PMASA-2016-24","http://lists.opensuse.org/opensuse-updates/2016-06/msg00113.html","http://lists.opensuse.org/opensuse-updates/2016-06/msg00114.html","http://www.debian.org/security/2016/dsa-3627"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-mwm8-36c5-j5cf","url":"https://osv.dev/vulnerability/GHSA-mwm8-36c5-j5cf"}],"summary":"phpMyAdmin Cross-site scripting (XSS) vulnerability"}