Skip to main content
CVE-2020-10466 Mar 12, 14:15 MEDIUM POC This Month

Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10465 Mar 12, 14:15 MEDIUM POC This Month

Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10464 Mar 12, 14:15 MEDIUM POC This Month

Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10463 Mar 12, 14:15 MEDIUM POC This Month

Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10462 Mar 12, 14:15 MEDIUM POC This Month

Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10456 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10455 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10454 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/sitemap-generator.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10453 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10452 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10451 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-user.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10450 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-traffic.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10449 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-search.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10448 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.7%
CVE-2020-10447 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-failed-login.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10446 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-category.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10445 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10444 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-rated.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10443 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-printed.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10442 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-popular.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10441 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-monthly.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10440 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-mailed.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10439 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-article-discussed.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10438 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/reply-ticket.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10437 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/optimize-database.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10436 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-profile.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10435 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/my-languages.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10434 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-versions.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10433 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-users.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10432 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-tickets.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10431 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-templates.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10430 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-subscribers.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10429 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-settings.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10428 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-news.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10427 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-languages.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10426 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-groups.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10425 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-glossary.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10424 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-fields.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10423 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-feedbacks.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10422 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-drafts.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10421 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-departments.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10420 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10419 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-categories.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10418 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attachments.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10417 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-articles.php by adding a question. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10416 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10415 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index.php by adding a question mark (?). Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10414 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index-attachments.php by adding a. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10413 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-html.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
CVE-2020-10412 Mar 12, 14:15 MEDIUM POC This Month

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.php by adding a question mark. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Phpkb Chadhaajay
NVD
CVSS 3.1
4.8
EPSS
0.6%
Prev Page 2 of 6 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy