What is CVE-2022-23808?

CVE-2022-23808 is a medium-severity vulnerability in Phpmyadmin, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2022-01-22.

How severe is CVE-2022-23808?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Is CVE-2022-23808 known to be exploited?

24 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Phpmyadmin

CVE-2022-23808

An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.072 (93.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Phpmyadmin
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

cve@mitre.org (Patch, Vendor Advisory)
cve@mitre.org
cve@mitre.org (vendor-advisory)

Frequently asked questions

What is CVE-2022-23808?: CVE-2022-23808 is a medium-severity vulnerability in Phpmyadmin, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2022-01-22.
How severe is CVE-2022-23808?: Medium severity. CVSS v3 base score is 6.1 out of 10.
Is CVE-2022-23808 known to be exploited?: 24 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.