CVE-2023-6027: Elijaa Phpmemcachedadmin

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled entries in the "/pmcadmin/configure.php" parameter.

Affected products

• Elijaa Phpmemcachedadmin: version 1.3.0 only

Published 2023-11-30. Last modified 2026-06-17.