CVE-2022-23808: XSS
Published Jan 22, 2022
·Updated
An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.
Affected Software
2 affected componentsFixes available
composer/phpmyadmin/phpmyadmin>=5.1.0<5.1.2
5.1.2
phpMyAdmin phpMyAdmin>=5.1.0<5.1.2
Remediation
Patch Available
Event History
Jan 22, 2022
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Jan 28, 2022
Advisory Published
via GitHub·10:36 PM
Frequently Asked Questions
1
What is the severity of CVE-2022-23808?
The severity of CVE-2022-23808 is medium with a CVSS score of 6.1.
2
What is the affected software for CVE-2022-23808?
The affected software for CVE-2022-23808 is phpMyAdmin 5.1 before 5.1.2.
3
What can an attacker do with CVE-2022-23808?
An attacker can inject malicious code into aspects of the setup script, allowing XSS or HTML injection.
4
How can I fix CVE-2022-23808?
To fix CVE-2022-23808, upgrade phpMyAdmin to version 5.1.2 or later.
5
Where can I find more information about CVE-2022-23808?
You can find more information about CVE-2022-23808 on the phpMyAdmin security page [here](https://www.phpmyadmin.net/security/PMASA-2022-2/).