Newsscriptphp News Script PHP Pro
4 CVEs affecting Newsscriptphp News Script PHP Pro. Latest disclosed: 2020-11-24. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25475 | Critical | 9.8 | 2020-11-24 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action. |
CVE-2020-25473 | Medium | 6.5 | 2020-11-24 | SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies. |
CVE-2020-25472 | Medium | 6.5 | 2020-11-24 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users. |
CVE-2020-25474 | Medium | 6.1 | 2020-11-24 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter. |