Nils Juenemann

The issue is related to a cross-site scripting (XSS) vulnerability in the table-structure page. This allows remote attackers to inject arbitrary web script or HTML via vectors involving a comment.

The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including server-privileges certificate data fields on the user privileges page, an "invalid JSON" error message in the error console, a database name in the central columns implementation, a group name, or a search name in the bookmarks implementation.

The issue allows remote attackers to inject arbitrary web script or HTML via crafted table parameters in the partition-range implementation in the table-structure page. This is due to multiple cross-site scripting (XSS) vulnerabilities in the `templates/table/structure/display partitions.phtml` file.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components. These vulnerabilities allow remote authenticated editors to inject arbitrary web script or HTML.

The issue allows remote attackers to inject arbitrary web script or HTML via several vectors, including a crafted table name, a crafted mysqld log bin directive, the Transformation implementation, AJAX error handling, the Designer implementation, the charts implementation, or the zoom-search implementation.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vectors related to this issue are Search forms.