News Script Php Pro CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2020-25475

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed

Vendors

Newsscriptphp

Products

News Script Php Pro

CVE-2020-25474

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Newsscriptphp

Products

News Script Php Pro

CVE-2020-25473

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Newsscriptphp

Products

News Script Php Pro

CVE-2020-25472

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Newsscriptphp

Products

News Script Php Pro

Page 1 of 1.