CVE-2020-10452: XSS

Published Mar 12, 2020

Updated

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/save-article.php by adding a question mark (?) followed by the payload.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10452?

CVE-2020-10452 is a vulnerability that allows Reflected XSS (injecting arbitrary web script or HTML) in the Chadha PHPKB Standard Multi-Language 9 software.

What is the severity of CVE-2020-10452?

The severity of CVE-2020-10452 is medium with a CVSS score of 4.8.

How does CVE-2020-10452 work?

CVE-2020-10452 allows an attacker to perform Reflected XSS by injecting arbitrary web script or HTML into the admin/save-article.php page through a specially crafted URI.

Which software is affected by CVE-2020-10452?

Chadha PHPKB Standard Multi-Language 9 (version 9.0) is affected by CVE-2020-10452.

Is there a fix for CVE-2020-10452?

To fix CVE-2020-10452, users should update their Chadha PHPKB Standard Multi-Language software to a version that has the vulnerability patched.