CVE-2011-1129

2022-10-0316:15:11

mitre

www.cve.org

cross-site scripting

smf

vulnerability

web script

html

authenticated users

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

JSON

Cross-site scripting (XSS) vulnerability in the EditNews function in ManageNews.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, might allow remote authenticated users to inject arbitrary web script or HTML via a save_items action.