Description
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-glossary.php by adding a question mark (?) followed by the payload.
Unscored
CVE-2020-10394
EUVD-2020-2847GHSA-7xcv-6w69-2xc5
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script…
Published Mar 12, 2020 · Updated Aug 4, 2024 · Assigned by mitre