CVE-2020-10462: XSS

Published Mar 12, 2020

Updated

Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10462?

CVE-2020-10462 is a vulnerability that allows attackers to inject arbitrary web script or HTML via the GET parameter in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9.

What is the severity of CVE-2020-10462?

CVE-2020-10462 has a severity level of medium.

How does CVE-2020-10462 impact Chadha PHPKB Standard Multi-Language 9?

CVE-2020-10462 allows attackers to exploit a reflected XSS vulnerability in the admin/edit-field.php page of Chadha PHPKB Standard Multi-Language 9, potentially leading to the injection of malicious script or HTML.

How can I fix CVE-2020-10462?

To fix CVE-2020-10462, update Chadha PHPKB Standard Multi-Language to version 9.0 or later, as the vulnerability has been addressed in the latest release.

What is the Common Weakness Enumeration (CWE) of CVE-2020-10462?

CVE-2020-10462 is associated with CWE-79, which represents the category of cross-site scripting (XSS) vulnerabilities.