CVE-2020-10389: Chadhaajay Phpkb

High severity, CVSS 7.2. EPSS: 4.9% chance of exploitation in the next 30 days.

admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.

Affected products

Published 2020-03-12. Last modified 2026-06-17.