{"id":"CVE-2020-35572","published":"2021-02-09T17:55:56Z","modified":"2024-08-04T17:09:13Z","title":"Adminer through 4.7.8 allows XSS via the history parameter to the default URI","vendor":null,"product":null,"tier":"tail","description":{"text":"Adminer through 4.7.8 allows XSS via the history parameter to the default URI.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02003,"percentile":0.80658,"provenance":"source"},"cwes":[],"references":[{"url":"https://sourceforge.net/p/adminer/news/","tags":["x_refsource_MISC"]},{"url":"https://sourceforge.net/p/adminer/bugs-and-features/775/","tags":["x_refsource_MISC"]}],"priority":{"score":16.1,"factors":[{"name":"EPSS percentile","points":16.13}]},"affected":[{"ecosystem":"Packagist","package":"vrana/adminer","vulnerableRanges":["<4.7.9"],"patched":["4.7.9"],"from":["GHSA-9pgx-gcph-mpqr"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-0541","exploited":false,"provenance":"source"}}