CVE-2020-25475: Newsscriptphp News Script PHP Pro

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.

Affected products

• Newsscriptphp News Script PHP Pro: version 2.3 only

Published 2020-11-24. Last modified 2026-06-17.