CVE-2020-10447

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/report-failed-login.php by adding a question mark ? followed by the payload...

CVE-2020-10447

The CVE-2020-10447 entry concerns Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS in the URI handling on admin/header.php that can affect admin/report-failed-login.php by injecting a payload after a question mark. The connected Red Hat CVE notes a similar XSS pattern for rela...