CVE-2020-10409

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-template.php by adding a question mark ? followed by the payload...

CVE-2020-10409

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/edit-template.php by adding a question mark ? followed by the payload...

CVE-2020-10409

Summary: CVE-2020-10409 affects Chadha PHPKB Standard Multi-Language 9; URIs parsed in admin/header.php allow a Reflected XSS in admin/edit-template.php when a payload is injected after a question mark. Affected: Chadha PHPKB Standard Multi-Language 9 (admin area). Root cause (as stated): URI han...