CVE-2020-25472: Newsscriptphp News Script PHP Pro

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.

Affected products

• Newsscriptphp News Script PHP Pro: version 2.3 only

Published 2020-11-24. Last modified 2026-06-17.