The vulnerability allows an attacker to embed arbitrary HTML in JSON responses from several Cloud Wizard endpoints in pgAdmin 4 (CWE‑79). An authenticated user who submits a crafted access key that triggers an SDK error can cause the Cloud Wizard’s frontend to render unescaped error text containing an iframe that loads a malicious host. The underlying flaw stems from outputting unescaped exception strings into the JSON sink (CWE‑116), which the frontend parses as HTML. When the browser processes the injected iframe, JavaScript from the cross‑origin frame can change the parent window’s location, redirecting the victim’s pgAdmin session. X‑Frame‑Options and CSP frame‑ancestors headers configured for pgAdmin do not mitigate this because the injection occurs inside the pgAdmin interface itself. The damage is limited to the authenticated user who supplied the payload unless a CSRF token is available to affect other users.

pgAdmin 4 from version 6.6 up to, but not including, 9.16 is affected. The flaw exists in multiple cloud deployment endpoints under /rds/, /azure/, /google/, and the top‑level /cloud/ blueprint, as documented by the vendor pgadmin.org.

The CVSS score of 4.8 indicates moderate severity. EPSS data is not available and the vulnerability is not listed in CISA’s KEV catalog. Attack is feasible from any authenticated pgAdmin user who can submit a malicious credential. Commitment of a CSRF token is required to redirect other authenticated users. The exploit does not gain system‑wide privileges or exfiltrate data beyond the victim’s session; however, the ability to redirect to malicious sites can lead to credential theft or session hijacking if the victim is tricked into logging into a spoofed pgAdmin instance.