CVE-2020-10402

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9

Description The issue concerns the handling of URIs in admin/header.php, which allows for Reflected XSS attacks. This can be exploited in admin/edit-category.php by adding a question mark (?) followed by the payload, enabling the injection of arbitrary web script or HTML.

Recommendations For Chadha PHPKB Standard Multi-Language version 9, consider restricting access to the admin/edit-category.php page until a proper fix is applied, and ensure that all user input is properly sanitized to prevent XSS attacks. As a temporary workaround, consider validating and encoding all URI parameters to prevent malicious injections.