Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-17206)

Chadha PHPKB is a knowledge base software that keeps information organized, accessible and manageable for internal teams and external clients. A reflected cross-site scripting vulnerability exists in admin/add-glossary.php in Chadha PHPKB Standard Multilingual Version 9. The vulnerability stems...

CVE-2020-10394

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-glossary.php by adding a question mark ? followed by the payload...