NewsscriptphpCVEs & Vulnerabilities
4 CVEs affecting Newsscriptphp products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
4 CVEs→ All vendors
Most Affected Products
news script php pro 4
CVE-2020-25475CRITICAL
SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
24 Nov 2020
9.8
CVSS
CVE-2020-25474MEDIUM
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
24 Nov 2020
6.1
CVSS
CVE-2020-25473MEDIUM
SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
24 Nov 2020
6.5
CVSS
CVE-2020-25472MEDIUM
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.
24 Nov 2020
6.5
CVSS
← PrevPage 1 / 1Next →