CVE-2020-10391

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/add-article.php by adding a question mark ? followed by the payload...

CVE-2020-10391

CVE-2020-10391 describes a reflected XSS in Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are handled in admin/header.php, enabling an attacker to inject script/HTML into admin/add-article.php by appending a payload after a question mark. The connected Red Hat CVE entries...