CVE-2020-10488

Name of the Vulnerable Software and Affected Versions Chadha PHPKB Standard Multi-Language version 9

Description The issue allows attackers to delete a news article via a crafted request to the "admin/manage-news.php" endpoint. This is made possible by a CSRF flaw.

Recommendations For Chadha PHPKB Standard Multi-Language version 9, consider implementing proper CSRF protection mechanisms, such as tokens, to prevent unauthorized requests to the "admin/manage-news.php" endpoint. As a temporary workaround, restrict access to this endpoint to minimize the risk of exploitation.