Filtered by vendor Newsscriptphp Subscriptions
Filtered by product News Script Php Pro Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-25475 1 Newsscriptphp 1 News Script Php Pro 2024-11-21 9.8 Critical
SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
CVE-2020-25474 1 Newsscriptphp 1 News Script Php Pro 2024-11-21 6.1 Medium
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
CVE-2020-25473 1 Newsscriptphp 1 News Script Php Pro 2024-11-21 6.5 Medium
SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.
CVE-2020-25472 1 Newsscriptphp 1 News Script Php Pro 2024-11-21 6.5 Medium
SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.