CVE-2020-10471

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9

Description The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-articles.php" page. This enables attackers to perform a reflected XSS attack.

Recommendations For Chadha PHPKB Standard Multi-Language version 9, consider validating and sanitizing user input for the sort parameter in the "admin/manage-articles.php" page to prevent injection of malicious scripts. As a temporary workaround, restrict access to the "admin/manage-articles.php" page until a proper fix is applied.