Medium
Adminer before 6.0.2 XSS via CONNECTION_ID escalating to RCE
Type: advisorySource: Official CVE List
Adminer before 6.0.2 contains a cross-site scripting vulnerability where the CONNECTION_ID() database result is interpolated into JavaScript without proper escaping, allowing a malicious database server to execute arb…
Products: adminerCVEs: CVE-2026-100695