7.4
High
CVE-2024-4216 pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload
Description
pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
Affected products and versions
Other CVEs of pgAdmin 4
The 56 CVEs of pgAdmin 4 →
CVE-2026-116252
pgAdmin 4: Materialized view refresh redirects its connection through a crafted database name
6.5
Medium
CVE-2026-116251
pgAdmin 4: A user's other sessions survive a change of their password
4.2
Medium
CVE-2026-116249
pgAdmin 4: Connection file paths and parameter keys escape the user's storage directory
8.4
High
CVE-2026-116250
pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check
6.5
Medium