CVE-2020-10487

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9

Description The issue allows attackers to delete a glossary term via a crafted request to the admin/manage-glossary.php endpoint. This is made possible by a CSRF flaw.

Recommendations For Chadha PHPKB Standard Multi-Language version 9, consider implementing proper CSRF protection mechanisms to prevent unauthorized requests to the admin/manage-glossary.php endpoint. As a temporary workaround, restrict access to this endpoint to minimize the risk of exploitation.