Newsscriptphp - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2020-11-24.

Products

• News Script Php Pro - 4 CVEs

Newest CVEs of Newsscriptphp

• CVE-2020-25475 - CVSS 9.8 (critical), 2020-11-24: SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
• CVE-2020-25474 - CVSS 6.1 (medium), 2020-11-24: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
• CVE-2020-25473 - CVSS 6.5 (medium), 2020-11-24: SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
• CVE-2020-25472 - CVSS 6.5 (medium), 2020-11-24: SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.