CVE-2020-10468: XSS

Published Mar 12, 2020

Updated

Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10468?

CVE-2020-10468 is a vulnerability in Chadha PHPKB Standard Multi-Language 9 that allows attackers to inject arbitrary web script or HTML via the GET parameter p in the admin/edit-news.php file.

What is the severity of CVE-2020-10468?

CVE-2020-10468 has a severity value of 4.8, which is considered medium.

How can an attacker exploit CVE-2020-10468?

An attacker can exploit CVE-2020-10468 by injecting malicious web script or HTML through the GET parameter p in the admin/edit-news.php file.

What is the affected software for CVE-2020-10468?

The affected software for CVE-2020-10468 is Chadha PHPKB Standard Multi-Language 9 with a version exactly equal to 9.0.

How can CVE-2020-10468 be fixed?

To fix CVE-2020-10468, update Chadha PHPKB Standard Multi-Language to a version that addresses the vulnerability or apply any patches provided by the vendor.