CVE-2020-10413 | BDVDB-2026-132221 Detail

Description#

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-html.php by adding a question mark (?) followed by the payload.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://antoniocannito.it/?p=137#uxss
https://antoniocannito.it/phpkb1#reflected-cross-site-scripting-in-every-admin-page-cve-block-going-from-cve-2020-10391-to-cve-2020-10456

Exploit#

No public exploit known

History#

Version 12020-03-12Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.