CVE-2020-25473: Newsscriptphp News Script PHP Pro

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.

Affected products

• Newsscriptphp News Script PHP Pro: version 2.3 only

Published 2020-11-24. Last modified 2026-06-17.