CVE-2020-10413

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/import-html.php by adding a question mark ? followed by the payload...

CVE-2020-10413

CVE-2020-10413 affects Chadha PHPKB Standard Multi-Language 9. The Red Hat advisories document the same root cause: URI handling in admin/header.php enables Reflected XSS by appending a question mark and payload, with affected admin pages including import-html.php (per CVE description) and relate...