CVE-2020-10477: XSS

Published Mar 12, 2020

Updated

Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.

Affected Software

1 affected component

Chadhaajay Phpkb=9.0

Event History

Mar 12, 2020

CVE Published

via MITRE·01:05 PM

Data Sourced

via MITRE·01:05 PM

Description

Frequently Asked Questions

What is CVE-2020-10477?

CVE-2020-10477 is a vulnerability that allows attackers to inject arbitrary web script or HTML in Chadha PHPKB Standard Multi-Language 9.

How severe is CVE-2020-10477?

CVE-2020-10477 has a severity rating of medium with a CVSS score of 4.8.

How does CVE-2020-10477 occur?

CVE-2020-10477 occurs through reflected XSS in the 'sort' parameter of admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9.

What is the impact of CVE-2020-10477?

CVE-2020-10477 allows attackers to inject arbitrary web script or HTML, which can lead to unauthorized access or modification of content, session hijacking, and disclosure of sensitive information.

How can I mitigate CVE-2020-10477?

To mitigate CVE-2020-10477, update Chadha PHPKB Standard Multi-Language to version 9.0 or apply any patches provided by the vendor.