CVE-2023-6027
CVE-2023-6027 · Cross-site Scripting vulnerability in PHPMemcachedAdmin
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled entries in the "/pmcadmin/configure.php" parameter.
CVSS 6.1 · Medium · EPSS 0.4%
- Published
- Updated
Stack: php
Affected products and versions
phpmemcachedadmin
- Versions
- 1.3.0: Affected
No fix published
elijaa/phpmemcacheadmin Packagist
- Affected ranges
- ECOSYSTEM: ≤ 1.3.0
No fix published