Medium severity4.8NVD Advisory· Published Mar 12, 2020· Updated Jun 17, 2026

CVE-2020-10464

Description

Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.

Affected products

Chadha PHPKB/Standard Multi-Languagedescription
Chadha/PHPKB Standard Multi-Languagellm-fuzzy
Chadha PHPKB/Chadha PHPKBllm-fuzzy

Patches

Vulnerability mechanics

References

antoniocannito.itnvdExploitThird Party Advisory
antoniocannito.it/phpkb2nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000