CVE-2022-28102

Published April 28th, 2022

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

A cross-site scripting (XSS) vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php.

housamz/php-mysql-admin-panel-generator

PHP MySQL Admin-panel Generator (MAGE), a PHP tool that helps you create a PHP CRUD system for any MySQL database in seconds.

GitHub

150