Description
A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled entries in the "/pmcadmin/configure.php" parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PHPMemcachedAdmin | PHPMemcachedAdmin | 1.3.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | elijaa/phpmemcacheadmin | <= 1.3.0 | — | GHSA-pr4w-m4rp-gp87 |