CVE-2020-10453

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/search-users.php by adding a question mark ? followed by the payload...

CVE-2020-10453

CVE-2020-10453 affects Chadha PHPKB Standard Multi-Language 9. The issue is a Reflected XSS via how URIs are handled in admin/header.php , exploitable in pages like admin/search-users.php (and related admin pages per Red Hat advisories) by appending a question mark and payload to the URI. Root ca...