PT-2020-16093
CVE-2020-25474
·
تاريخ النشر
2020-11-24
·
تاريخ التحديث
2020-11-27
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SimplePHPscripts News Script PHP Pro version 2.3
Description
The issue is a Cross Site Scripting (XSS) vulnerability. It can be exploited via the
editor name parameter.Recommendations
For SimplePHPscripts News Script PHP Pro version 2.3, avoid using the
editor name parameter until the issue is resolved. As a temporary workaround, consider restricting access to the editor name parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾