CVE-2020-10467: XSS

Published Mar 12, 2020

Updated

Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10467?

CVE-2020-10467 is a vulnerability in Chadha PHPKB Standard Multi-Language 9 that allows attackers to inject arbitrary web script or HTML via the GET parameter p.

How severe is CVE-2020-10467?

CVE-2020-10467 has a severity rating of 4.8, which is considered medium.

How does CVE-2020-10467 affect Chadha PHPKB Standard Multi-Language 9?

CVE-2020-10467 affects Chadha PHPKB Standard Multi-Language 9 by allowing attackers to inject arbitrary web script or HTML via the GET parameter p.

Is there a fix for CVE-2020-10467?

At the moment, there is no known fix for CVE-2020-10467. It is recommended to follow the vendor's advisories for any updates or patches.

What is the Common Weakness Enumeration (CWE) for CVE-2020-10467?

The Common Weakness Enumeration (CWE) for CVE-2020-10467 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').