CVE-2020-10453: XSS

Published Mar 12, 2020

Updated

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/search-users.php by adding a question mark (?) followed by the payload.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10453?

CVE-2020-10453 is a vulnerability that allows for Reflected XSS in Chadha PHPKB Standard Multi-Language 9.

What is the severity of CVE-2020-10453?

The severity of CVE-2020-10453 is medium, with a severity value of 4.8.

How is CVE-2020-10453 exploited?

CVE-2020-10453 is exploited by injecting arbitrary web script or HTML in the admin/search-users.php page by adding a question mark (?) followed by the payload in the URI.

What is the affected software for CVE-2020-10453?

The affected software for CVE-2020-10453 is Chadha PHPKB Standard Multi-Language 9.

Is there a fix available for CVE-2020-10453?

It is recommended to update to a fixed version of Chadha PHPKB Standard Multi-Language 9 to mitigate the CVE-2020-10453 vulnerability.