Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3070▲ 562 respecto a la semana anterior
Críticas / altas1457▲ 278 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)383▲ 176 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.36% | — | Simplephpscripts News Script PHP PRO | 7/7/2023 | 17/6/2026 | A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-233289… | |
| Modificada | Crítica (9.8) | 1.1% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action. | |
| Modificada | Media (6.1) | 0.87% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter. | |
| Modificada | Media (6.5) | 0.92% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies. | |
| Modificada | Media (6.5) | 0.52% | — | Newsscriptphp News Script PHP PRO | 24/11/2020 | 17/6/2026 | SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users. |