Chadha · Chadha Phpkb Standard Multi-Language · CVE-2020-10386
**Name of the Vulnerable Software and Affected Versions**
Chadha PHPKB Standard Multi-Language version 9
**Description**
The issue allows remote attackers to achieve code execution by uploading a .php file in the admin/js/ directory. This is made possible through the admin/imagepaster/image-upload.php file.
**Recommendations**
For version 9, restrict access to the admin/imagepaster/image-upload.php file to prevent unauthorized uploads, and consider removing or restricting write access to the admin/js/ directory until a fix is available.