Norv

The issue is related to the `loadUserSettings` function in Load.php, which does not properly handle invalid login attempts. This could make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.

A cross-site scripting (XSS) issue exists in the EditNews function in ManageNews.php. This could allow remote authenticated users to inject arbitrary web script or HTML via a save items action.