CVE-2020-10444

CVE-2020-10444 affects Chadha PHPKB Standard Multi-Language 9. The Red Hat entries indicate URIs are mishandled in admin/header.php, enabling Reflected XSS in the admin interface. For CVE-2020-10444 specifically, the described vector targets admin/report-article-rated.php by adding a leading ? wi...

CVE-2020-10444: Improper Neutralization of Input During Web Page Generation

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-article-rated.php by adding a question mark ? followed by the payload...