CVE-2023-6027 (published 2023-11-30T13:38:43.344Z)
A critical flaw has been identified in elijaa/phpmemcachedadmin affecting version 1.3.0, specifically related to a stored XSS vulnerability. This vulnerability allows malicious actors to insert a carefully crafted JavaScript payload. The issue arises from improper encoding of user-controlled entries in the "/pmcadmin/configure.php" parameter.
Affected products: Vendor: PHPMemcachedAdmin 
Product: PHPMemcachedAdmin 
Versions: 1.3.0