CVE-2020-10415

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/index.php by adding a question mark ? followed by the payload...

CVE-2020-10415

CVE-2020-10415 concerns Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS in URIs processed by admin/header.php, enabling an attacker to inject arbitrary script/HTML via a crafted query string (e.g., a payload following a ?). Related Red Hat entries (CVE-2020-10391 and CVE-2020...