CVE-2020-10434

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-versions.php by adding a question mark ? followed by the payload...

CVE-2020-10434

CVE-2020-10434 concerns Chadha PHPKB Standard Multi-Language 9. The issue arises from how URIs are processed in admin/header.php, enabling a Reflected XSS by appending a question mark followed by payload to admin/manage-versions.php. Connected Red Hat CVEs (CVE-2020-10391 and CVE-2020-10456) desc...