CVE-2025-2946
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Apr 3, 2025
Updated: Apr 23, 2025
CWE ID 79
Summary
CVE-2025-2946 is a newly disclosed vulnerability that impacts pgAdmin versions prior to 9.1. This issue allows attackers to inject arbitrary HTML/JavaScript code through query result rendering, which can be executed in a user's browser. Successful exploitation of this Cross-Site Scripting (XSS) vulnerability can lead to unauthorized access to sensitive information or even full control over the affected system. Users are advised to upgrade to the latest version of pgAdmin to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- pgAdmin 4
- pgAdmin
Affected Vendors
- Pgadmin