CVE-2019-1000004

6.1 mediumEPSS 0.8%

Medium (6.1) in jspmyadmin jspmyadmin2. EPSS 0.8% chance of exploitation in the next 30 days.

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jspmyadmin:jspmyadmin2

References

https://github.com/yugandhargangu/JspMyAdmin2/issues/22
https://github.com/yugandhargangu/JspMyAdmin2/issues/22

Check your stack JSON