CVE-2020-10472: XSS

Published Mar 12, 2020

Updated

Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10472?

CVE-2020-10472 is a vulnerability that allows attackers to inject arbitrary web script or HTML via the GET parameter sort in the Chadha PHPKB Standard Multi-Language 9.

Which software versions are affected by CVE-2020-10472?

Chadha PHPKB Standard Multi-Language 9.0 is affected by CVE-2020-10472.

How severe is CVE-2020-10472?

CVE-2020-10472 has a severity rating of 4.8 (medium).

How can attackers exploit CVE-2020-10472?

Attackers can exploit CVE-2020-10472 by injecting arbitrary web script or HTML through the GET parameter sort.

Are there any references available for CVE-2020-10472?

Yes, you can find references for CVE-2020-10472 at http://antoniocannito.it/?p=342#xss11 and https://antoniocannito.it/phpkb2#reflected-cross-site-scripting-when-sorting-templates-cve-2020-10472.