PatchTheCVE: chadhaajayhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-11579: An issue was discovered in Chadha PHPKB 9.0 Enterprise Editionhttps://patchthecve.com/cve/CVE-2020-11579.htmlhttps://patchthecve.com/cve/CVE-2020-11579.htmlWed, 17 Jun 2026 02:50:24 +0000HIGH 7.5: An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled.CVE-2020-10504: CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, https://patchthecve.com/cve/CVE-2020-10504.htmlhttps://patchthecve.com/cve/CVE-2020-10504.htmlWed, 17 Jun 2026 02:47:55 +0000MEDIUM 4.3: CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.CVE-2020-10503: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove anyhttps://patchthecve.com/cve/CVE-2020-10503.htmlhttps://patchthecve.com/cve/CVE-2020-10503.htmlWed, 17 Jun 2026 02:47:55 +0000MEDIUM 4.3: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request.CVE-2020-10502: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any cohttps://patchthecve.com/cve/CVE-2020-10502.htmlhttps://patchthecve.com/cve/CVE-2020-10502.htmlWed, 17 Jun 2026 02:47:55 +0000MEDIUM 4.3: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request.CVE-2020-10501: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a depahttps://patchthecve.com/cve/CVE-2020-10501.htmlhttps://patchthecve.com/cve/CVE-2020-10501.htmlWed, 17 Jun 2026 02:47:55 +0000MEDIUM 6.5: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.CVE-2020-10500: CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any tickhttps://patchthecve.com/cve/CVE-2020-10500.htmlhttps://patchthecve.com/cve/CVE-2020-10500.htmlWed, 17 Jun 2026 02:47:55 +0000MEDIUM 4.3: CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request.CVE-2020-10499: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any tickehttps://patchthecve.com/cve/CVE-2020-10499.htmlhttps://patchthecve.com/cve/CVE-2020-10499.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 4.3: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request.CVE-2020-10498: CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category,https://patchthecve.com/cve/CVE-2020-10498.htmlhttps://patchthecve.com/cve/CVE-2020-10498.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 6.5: CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.CVE-2020-10497: CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a cathttps://patchthecve.com/cve/CVE-2020-10497.htmlhttps://patchthecve.com/cve/CVE-2020-10497.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 6.5: CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.CVE-2020-10496: CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, https://patchthecve.com/cve/CVE-2020-10496.htmlhttps://patchthecve.com/cve/CVE-2020-10496.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 4.3: CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request.CVE-2020-10495: CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article https://patchthecve.com/cve/CVE-2020-10495.htmlhttps://patchthecve.com/cve/CVE-2020-10495.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 4.3: CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request.CVE-2020-10494: CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article,https://patchthecve.com/cve/CVE-2020-10494.htmlhttps://patchthecve.com/cve/CVE-2020-10494.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 4.3: CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.CVE-2020-10493: CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary https://patchthecve.com/cve/CVE-2020-10493.htmlhttps://patchthecve.com/cve/CVE-2020-10493.htmlWed, 17 Jun 2026 02:47:54 +0000MEDIUM 4.3: CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request.CVE-2020-10492: CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an arthttps://patchthecve.com/cve/CVE-2020-10492.htmlhttps://patchthecve.com/cve/CVE-2020-10492.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.CVE-2020-10491: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a deparhttps://patchthecve.com/cve/CVE-2020-10491.htmlhttps://patchthecve.com/cve/CVE-2020-10491.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request.CVE-2020-10490: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a dehttps://patchthecve.com/cve/CVE-2020-10490.htmlhttps://patchthecve.com/cve/CVE-2020-10490.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.CVE-2020-10489: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a tickethttps://patchthecve.com/cve/CVE-2020-10489.htmlhttps://patchthecve.com/cve/CVE-2020-10489.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.CVE-2020-10488: CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news artihttps://patchthecve.com/cve/CVE-2020-10488.htmlhttps://patchthecve.com/cve/CVE-2020-10488.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.CVE-2020-10487: CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glosshttps://patchthecve.com/cve/CVE-2020-10487.htmlhttps://patchthecve.com/cve/CVE-2020-10487.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.CVE-2020-10486: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a commehttps://patchthecve.com/cve/CVE-2020-10486.htmlhttps://patchthecve.com/cve/CVE-2020-10486.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.CVE-2020-10485: CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an artihttps://patchthecve.com/cve/CVE-2020-10485.htmlhttps://patchthecve.com/cve/CVE-2020-10485.htmlWed, 17 Jun 2026 02:47:53 +0000MEDIUM 4.3: CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.CVE-2020-10484: CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom fielhttps://patchthecve.com/cve/CVE-2020-10484.htmlhttps://patchthecve.com/cve/CVE-2020-10484.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/add-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to create a custom field via a crafted request.CVE-2020-10483: CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on anyhttps://patchthecve.com/cve/CVE-2020-10483.htmlhttps://patchthecve.com/cve/CVE-2020-10483.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/ajax-hub.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to post a comment on any article via a crafted request.CVE-2020-10482: CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new articlehttps://patchthecve.com/cve/CVE-2020-10482.htmlhttps://patchthecve.com/cve/CVE-2020-10482.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/add-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new article template via a crafted request.CVE-2020-10481: CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossarhttps://patchthecve.com/cve/CVE-2020-10481.htmlhttps://patchthecve.com/cve/CVE-2020-10481.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/add-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new glossary term via a crafted request.CVE-2020-10480: CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new categorhttps://patchthecve.com/cve/CVE-2020-10480.htmlhttps://patchthecve.com/cve/CVE-2020-10480.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/add-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new category via a crafted request.CVE-2020-10479: CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news articlhttps://patchthecve.com/cve/CVE-2020-10479.htmlhttps://patchthecve.com/cve/CVE-2020-10479.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.3: CSRF in admin/add-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a new news article via a crafted request.CVE-2020-10478: CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the glohttps://patchthecve.com/cve/CVE-2020-10478.htmlhttps://patchthecve.com/cve/CVE-2020-10478.htmlWed, 17 Jun 2026 02:47:52 +0000HIGH 8.8: CSRF in admin/manage-settings.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to change the global settings, potentially gaining code execution or causing a denial of service, via a crafted request.CVE-2020-10477: Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arhttps://patchthecve.com/cve/CVE-2020-10477.htmlhttps://patchthecve.com/cve/CVE-2020-10477.htmlWed, 17 Jun 2026 02:47:52 +0000MEDIUM 4.8: Reflected XSS in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10476: Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injechttps://patchthecve.com/cve/CVE-2020-10476.htmlhttps://patchthecve.com/cve/CVE-2020-10476.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10475: Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injecthttps://patchthecve.com/cve/CVE-2020-10475.htmlhttps://patchthecve.com/cve/CVE-2020-10475.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10474: Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injechttps://patchthecve.com/cve/CVE-2020-10474.htmlhttps://patchthecve.com/cve/CVE-2020-10474.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10473: Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injhttps://patchthecve.com/cve/CVE-2020-10473.htmlhttps://patchthecve.com/cve/CVE-2020-10473.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10472: Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to injehttps://patchthecve.com/cve/CVE-2020-10472.htmlhttps://patchthecve.com/cve/CVE-2020-10472.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10470: Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject https://patchthecve.com/cve/CVE-2020-10470.htmlhttps://patchthecve.com/cve/CVE-2020-10470.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10469: Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inhttps://patchthecve.com/cve/CVE-2020-10469.htmlhttps://patchthecve.com/cve/CVE-2020-10469.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter sort.CVE-2020-10468: Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbihttps://patchthecve.com/cve/CVE-2020-10468.htmlhttps://patchthecve.com/cve/CVE-2020-10468.htmlWed, 17 Jun 2026 02:47:51 +0000MEDIUM 4.8: Reflected XSS in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10467: Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject ahttps://patchthecve.com/cve/CVE-2020-10467.htmlhttps://patchthecve.com/cve/CVE-2020-10467.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-comment.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10466: Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject https://patchthecve.com/cve/CVE-2020-10466.htmlhttps://patchthecve.com/cve/CVE-2020-10466.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10465: Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject https://patchthecve.com/cve/CVE-2020-10465.htmlhttps://patchthecve.com/cve/CVE-2020-10465.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10464: Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject ahttps://patchthecve.com/cve/CVE-2020-10464.htmlhttps://patchthecve.com/cve/CVE-2020-10464.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10463: Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject https://patchthecve.com/cve/CVE-2020-10463.htmlhttps://patchthecve.com/cve/CVE-2020-10463.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10462: Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbhttps://patchthecve.com/cve/CVE-2020-10462.htmlhttps://patchthecve.com/cve/CVE-2020-10462.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.8: Reflected XSS in admin/edit-field.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject arbitrary web script or HTML via the GET parameter p.CVE-2020-10461: The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha Phttps://patchthecve.com/cve/CVE-2020-10461.htmlhttps://patchthecve.com/cve/CVE-2020-10461.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 6.1: The way comments in article.php (vulnerable function in include/functions-article.php) are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/manage-comments.php, via the GET parameter cmt.CVE-2020-10460: admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows https://patchthecve.com/cve/CVE-2020-10460.htmlhttps://patchthecve.com/cve/CVE-2020-10460.htmlWed, 17 Jun 2026 02:47:50 +0000MEDIUM 4.9: admin/include/operations.php (via admin/email-harvester.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to inject untrusted input inside CSV files via the POST parameter data.CVE-2020-10459: Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functiohttps://patchthecve.com/cve/CVE-2020-10459.htmlhttps://patchthecve.com/cve/CVE-2020-10459.htmlWed, 17 Jun 2026 02:47:49 +0000LOW 2.7: Path Traversal in admin/assetmanager/assetmanager.php (vulnerable function saved in admin/assetmanager/functions.php) in Chadha PHPKB Standard Multi-Language 9 allows attackers to list the files that are stored on the webserver using a dot-dot-slash sequence (../) via the POST parameter inpCurrFoldeCVE-2020-10458: Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers https://patchthecve.com/cve/CVE-2020-10458.htmlhttps://patchthecve.com/cve/CVE-2020-10458.htmlWed, 17 Jun 2026 02:47:49 +0000MEDIUM 6.5: Path Traversal in admin/imagepaster/operations.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete any folder on the webserver using a dot-dot-slash sequence (../) via the GET parameter crdir, when the GET parameter action is set to df, causing a Denial of Service.CVE-2020-10457: Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackhttps://patchthecve.com/cve/CVE-2020-10457.htmlhttps://patchthecve.com/cve/CVE-2020-10457.htmlWed, 17 Jun 2026 02:47:49 +0000LOW 2.7: Path Traversal in admin/imagepaster/image-renaming.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to rename any file on the webserver using a dot-dot-slash sequence (../) via the POST parameter imgName (for the new name) and imgUrl (for the current file to be renamed).CVE-2020-10456: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (ihttps://patchthecve.com/cve/CVE-2020-10456.htmlhttps://patchthecve.com/cve/CVE-2020-10456.htmlWed, 17 Jun 2026 02:47:49 +0000MEDIUM 4.8: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/trash-box.php by adding a question mark (?) followed by the payload.CVE-2020-10455: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (ihttps://patchthecve.com/cve/CVE-2020-10455.htmlhttps://patchthecve.com/cve/CVE-2020-10455.htmlWed, 17 Jun 2026 02:47:49 +0000MEDIUM 4.8: The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/translate.php by adding a question mark (?) followed by the payload.