CVE-2025-2946

Published: Apr 3, 2025
Updated: Aug 11, 2025
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2025-2946" target="_blank" rel="noopener"> CVE-2025-2946
GHSA: <a href="https://github.com/advisories/GHSA-2rrx-pphc-qfv9" target="_blank" rel="noopener"> GHSA-2rrx-pphc-qfv9
Severity: Critical
Exploit:

pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.