Input validation vulnerability in WP phpMyAdmin 5.2.0.3

The WP phpMyAdmin plugin for WordPress has a security issue that could allow an unauthenticated attacker to inject malicious code into pages in versions up to and including 5.2.0.3. This is due to the plugin’s use of add_query_arg, which does not properly sanitize input or properly escape output. If an attacker can then trick a user into clicking on a malicious link, the code they injected could be executed.