Description
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.php by adding a question mark (?) followed by the payload.
Unscored
CVE-2020-10412
EUVD-2020-2865GHSA-5h7h-5p77-xm72
The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script…
Published Mar 12, 2020 · Updated Aug 4, 2024 · Assigned by mitre