CVE-2022-28102

MediumCVSS 5.4

Published: 28/04/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile - higher than 37% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to inject arbitrary web scripts or HTML via a crafted payload in /edit-db.php.

Risk Assessment

Attackers can steal session data, redirect users to malicious sites, or perform arbitrary actions in the victim's browser context, compromising data confidentiality and integrity.

Recommendation

Immediately update PHP MySQL Admin Panel Generator to the latest version and apply input filtering and encoding in /edit-db.php.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability in PHP MySQL Admin Panel Generator v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected at /edit-db.php.