CVE-2011-3591: phpMyAdmin Multiple XSS Vulnerabilities After… (CVSS 3.5)

NVD Score used 3.5

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: CVE-2011-3591
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: CVE-2011-3591
Updated: 2026-11-02

EUVDEUVD-2022-2222 No score

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: EUVD-2022-2222
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3p87-w3c5-27gf No score

phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: GHSA-3p87-w3c5-27gf
Weakness: CWE-79
Updated: 2026-11-02

OSV No score

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: CVE-2011-3591
Updated: 2026-11-02

OSVDEBIAN-CVE-2011-3591 No score

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: DEBIAN-CVE-2011-3591
Updated: 2026-11-02

OSVGHSA-3p87-w3c5-27gf No score

phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save

Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row that triggers an improperly constructed confirmation message after inline-editing and save operations, related to (1) js/functions.js and (2) js/tbl_structure.js.

Record: GHSA-3p87-w3c5-27gf
Weakness: CWE-79
Updated: 2026-11-02

Package	Affected	Fixed
`phpmyadmin/phpmyadmin` Packagist	3.4.0 up to 3.4.5	3.4.5
`phpmyadmin` Debian:12	before 4:3.4.5-1	4:3.4.5-1
`phpmyadmin` Debian:13	before 4:3.4.5-1	4:3.4.5-1
`phpmyadmin` Debian:14	before 4:3.4.5-1	4:3.4.5-1

When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

CVE-2011-3591

Exploit likelihood

What each source reports

Affected products

Affected packages

History

References