CVE-2020-10403

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-comment.php by adding a question mark ? followed by the payload...

CVE-2020-10403

CVE-2020-10403 affects Chadha PHPKB Standard Multi-Language 9: URIs mishandled in admin/header.php enable Reflected XSS in admin/edit-comment.php via a crafted query string. Exploitation details and remediation are not provided in the connected documents.