CVE-2020-10423

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-feedbacks.php by adding a question mark ? followed by the payload...

CVE-2020-10423

CVE-2020-10423 is a reflected XSS in Chadha PHPKB Standard Multi-Language 9 caused by improper URI handling in admin/header.php, exploitable via URIs on admin pages such as admin/manage-feedbacks.php (and related pages listed in Red Hat advisories). The Red Hat records attribute the issue to URIs...