CVE-2020-10477

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9

Description The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the admin/manage-news.php file. This can lead to reflected XSS attacks.

Recommendations For version 9, update the admin/manage-news.php file to properly sanitize the sort parameter to prevent injection of arbitrary web script or HTML. As a temporary workaround, consider restricting access to the admin/manage-news.php file until a patch is available. Avoid using the sort parameter in the affected file until the issue is resolved.