CVE-2022-23808
Cross-site Scripting in phpmyadmin
6.1
MEDIUM
CVSS 3.1
EPSS 49.4%
Description
An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
How to fix CVE-2022-23808
To remediate CVE-2022-23808, upgrade the affected package to a fixed version below.
- Bitnami/phpmyadmin—upgrade to 5.1.2 or later
- Debian/phpmyadmin—no fix listed
- —upgrade to 5.1.2 or later
Is CVE-2022-23808 being exploited?
Moderate — EPSS is 49.4%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (3)
- >= 5.1.0, < 5.1.2
- from 0
- >= 5.1.0, < 5.1.2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |