Cross site scripting

2020-03-1214:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.0%

JSON

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.

CPENameOperatorVersion
phpkbeq9.0

CPE	Name	Operator	Version
	phpkb	eq	9.0

References

antoniocannito.it/?p=137

antoniocannito.it/phpkb1

0.001 Low

EPSS

Percentile

32.0%

JSON

Related for PRION:CVE-2020-10456