CVE-2020-27163

Name of the Vulnerable Software and Affected Versions phpRedisAdmin versions prior to 1.13.2

Description The issue allows for XSS via the username parameter in the "login.php" endpoint. This affects a significant number of devices, but the exact count is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations For versions prior to 1.13.2, update to version 1.13.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the login.php endpoint or avoiding the use of the username parameter until the issue is resolved.