All vulnerabilities

Servers and applications

CVE-2024-4216

pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.

Severity
Medium 5.4
Published
2 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.6
Sources
NVD

Affected software

SoftwareAffected versions
pgAdminServers and applications · cpe:a:pgadmin:pgadmin_4
  • Every version before 8.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-4216
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-4216