pgAdmin <= 8.5 is affected by XSS vulnerability in /settings/store API response json payload. This vulnerability allows attackers to execute malicious script at the client end.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')