CVE-2025-2946

Name of the Vulnerable Software and Affected Versions pgAdmin versions 9.1 and earlier

Description The issue allows attackers to execute Cross-Site Scripting (XSS) attacks via query result rendering, enabling them to run arbitrary HTML/JavaScript in a user's browser. This occurs when an attacker executes any arbitrary HTML/JavaScript in a user's browser through query result rendering.

Recommendations For pgAdmin versions 9.1 and earlier, update to a newer version to mitigate the risk of XSS attacks. As a temporary workaround, consider restricting the rendering of query results to minimize the risk of exploitation.