CVE-2011-1129

CVE-2011-1129 is a cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) via the EditNews function in ManageNews.php. It affects SMF versions before 1.1.13 and 2.x before 2.0 RC5, where remote authenticated users could inject arbitrary web script or HTML through a save_items act...