CVE-2022-23808

6.1 mediumEPSS 7.9%

Medium (6.1) in phpmyadmin phpmyadmin. EPSS 7.9% chance of exploitation in the next 30 days.

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 7.9% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-01-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpmyadmin:phpmyadmin

References

https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97
https://security.gentoo.org/glsa/202311-17
https://www.phpmyadmin.net/security/PMASA-2022-2/
https://infosecwriteups.com/exploit-cve-2022-23808-85041c6e5b97
https://security.gentoo.org/glsa/202311-17

Check your stack JSON