CVE-2010-2858

Multiple cross-site scripting XSS vulnerabilities in news.php in SimpNews 2.47.03 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 layout and 2 sortorder parameters...

CVE-2010-2858

SimpNews (versions up to 2.47.03) is affected by multiple XSS vulnerabilities in news.php, enabling remote attackers to inject arbitrary script or HTML via the layout and sortorder parameters. The issue arises from insufficient input sanitization, allowing reflected or stored-like XSS depending o...

CVE-2010-2858

creationtimestamp| type| source ---|---|--- 2010-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34286...