CVE-2020-25474: Newsscriptphp News Script PHP Pro

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.

Affected products

• Newsscriptphp News Script PHP Pro: version 2.3 only

Published 2020-11-24. Last modified 2026-06-17.