CVE-2022-23808

—

CVSS 3.1

6.1 medium

EPSS

8%p94

Published

Jan 22, 2022 (Jan 22, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

Vendors: phpmyadmin
Products: phpmyadmin
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (7.9%)

In the news0 stories

No ingested article mentions this CVE yet.