Home Embedded Vulns General Vulns

CVE-2020-10388

MEDIUM 5.4

Our Analysis: General Purpose

Our model has classified this vulnerability as relevant to General Purpose Systems, helping your team prioritize efforts effectively.

Published Date March 12, 2020
Last Modified November 21, 2024
CVSS Vector Not Available

Description

The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-referrers.php (vulnerable file admin/include/functions-articles.php).

Potentially Affected Vendors